Security Alerts & Warnings

This page lists current warnings regarding suspicious email messages and other cybersecurity hazards at the University of Virginia.  For guidance on how to secure yourself against these hazards, be sure to visit our tip of the month.

Regarding Suspicious Email Alerts

Messages similar to the suspicious emails listed below may be related to phishing scams, schemes to commit identity theft, or other attempts to compromise users’ machines or personal information.

  • If you receive an email similar to any of the suspicious emails on this page, DO NOT respond—delete it immediately!
  • Do not click any links in the email, and do not “unsubscribe” or acknowledge the email in any way.
  • If you receive an email that appears “phishy” and are unsure if it’s legitimate, and it is not listed below, please report it to us by forwarding it to [email protected].

Security Alerts and Suspicious Items Currently Affecting UVA:

Posted:

You have new pending messages

Dear mst3k[at]virginia.edu,

 You have 5 New pending mails under the virginia.edu mail network server. Your mail version 2.0.1 is currently being discontinued from receiving incoming e-mail, and will no longer work 24 hours from 2/9/2020 3:35:18 p.m..

To retrieve your messages and upgrade to version 5.0.1, kindly follow the upgrade information below:

RESTORE MESSAGES NOW [hxxps xxx.kesbangpolprovkaltim.info/poldagri/wp-content/themes/twentynineteen/js/url/cloud.php ?rem=abuse[at]virginia.edu]

 Regard
 virginia.edu admin 2020 | All rights reserved.

Posted:

Dear  mst3k

Your  recent request to deactivate your  e-mail will be processed shortly.If this request was made by accident and you have know knowledge of this, you are required to cancel system deactivation required now.

Cancel Deactivation Request [hxxp://plastometalik.hr/apartmani/admin/update/index.php?email=%0%]  [hxxps xxx.facebook.com/n/?ewa.deren.5%2Fposts%2F615239995318448&medium=email&mid=535e531392581G5af5b4d74d0cG535e57acf2853G313G465&bcode=1.1466634605.AblhpkNc7fnZp7tK&n_m=]

However, if you do not cancel this request, your account will be deactivated and all your e-mail data will lost.

Sincerely.

 Email  Administrator
-------------------------------------------
Product: Regular Mailbox
  mst3k[at]virginia.edu

Due Date: 1/02/2020
 Blacklist Reason: Policy Violation

Posted:

From: John C. Jeffries
Sent: Friday, March 6, 2020 6:11 AM
Subject: [No Subject]

 

 

Do you have a min? I need something done.

Posted:

From: Helpdesk
Date: Monday, March 2, 2020 at 2:27 AM
To: Typical User
Subject: You have 12 pending message(s) in stream virginia.edu

NOTIFICATION

________________________________

Hello rz

You have 12 delayed messages on Friday 28th Of February 2020. Your action is required,

Release Emails Here<2vtjff2>

rectify it above.

MICROSOFT

________________________________

Change how events are added from email  Privacy Statements

Microsoft Corporation. One Microsoft Way, Redmond, WA 98052

Posted:

Subject: [Card Fraud Prevention] Activity On Your Debit or ATM Card On 02/27/2020 [MAIL ID:4435446]
Date: February 26, 2020 at 10:53:24 AM EST

 

Posted:

Unusual sign-in activity

This is to inform you that your request to remove your account from Outlook Web App server has been approved and will initiate in one hour from the exact time you open this message.

Posted:

From: mst3k  
Sent: Tuesday, February 4, 2020 1:47 PM
To: mst3k[at]virginia.edu

Posted:

From: Colin Jamieson <cjamie02[at]uoguelph.ca
Sent: Thursday, January 23, 2020 8:08 AM
Subject: Your Additional Pay & Paid Days Off Awarded

 

Additional Pay & Paid Days Off

Posted:

________________________________
From: Server
Sent: Monday, January 20, 2020 6:58 AM
To: User, Typical S (mst3k)
Subject: Quota exceeded

Mail Quota: (99% Full)

The size limit of 4096 MB for mailbox mst3k[at]virginia.edu

 has been exceeded. Incoming mail is currently being rejected. To upgrade for more Megabytes [MB].

Upgrade Email Quota

Note: This upgrade is required immediately after receiving this message

Posted:

From: Microsoft Team
Reply-To: "account-security-noreply“[at]”accountprotection.microsoft.com"
Date: Monday, January 13, 2020 at 4:47 PM
To: "UVA User“[at]”virginia.edu"
Subject: Microsoft account unusual sign-in activity

Microsoft Account [hxxps://tinyurl.com/yxy7ybm3]
Unusual Sign-in activity

we detected unusual activity about recent sign-in to the Microsoft account UVA User“[at]”virginia.edu.

Sign-in details:

Country/region : United States/New York
IP address: 108.102.02.110
Date: 12/01/2019 15:25 (GMT)
Browser : Chrome