Search Information Security site

 

Main menu

Security Alerts & Warnings

This page lists current warnings regarding suspicious email messages and other cybersecurity hazards at the University of Virginia.  For guidance on how to secure yourself against these hazards, be sure to visit our tip of the month.

Regarding Suspicious Email Alerts

Messages similar to the suspicious emails listed below may be related to phishing scams, schemes to commit identity theft, or other attempts to compromise users’ machines or personal information.

  • If you receive an email similar to any of the suspicious emails on this page, DO NOT respond—delete it immediately!
  • Do not click any links in the email, and do not “unsubscribe” or acknowledge the email in any way.
  • If you receive an email that appears “phishy” and are unsure if it’s legitimate, and it is not listed below, please report it to us. Forward it to [email protected].

Security Alerts and Suspicious Items Currently Affecting UVA:

[Posted: Jun 27, 2019 10:21 AM]

From: Don Cartier <forexloanorganization[at]gmail.com>
Sent: Wednesday, June 26, 2019 9:44 PM
Subject: Financial Service Funds

Fortress Capital Investment
Loan Order Department

This is from Capital Financial Loan Investment, we offer Personal Loan, Business Loans, Students Loan
with a very low interest rate and with or without collateral.

We are very solid and have the capacity to swift large amount of funds
across to local and abroad. If you are interested, reply back to commence
loan approval

Full Name: .................
Loan Amount: .................
Phone Number: .................
Country: ....................

We shall contact you with more details to complete your application
through email/phone

At Your Service,
Mr. Don Cartier
Loan Application Director
Capital Financial Loan Investment

[Posted: Jun 27, 2019 9:08 AM]

From: virginia.edu<hxxp://virginia.edu> <sales[at]forexnewsmart.info<mailto:sales[at]forexnewsmart.info>>
Subject: ✉ DEAR mst3k Messages Pending Delivery On Your e-Mail Portal
Date: June 26, 2019 at 3:11:11 PM EDT
To: mst3k[at]virginia.edu<mailto:mst3k[at]virginia.edu>

Dear Mail User

You have Three (3) Messages Pending Delivery On Your e-Mail Portal Since: 14 June 2019.
This messages can be viewed by the subject of each message or proceed to  sign in   to Release   Message on your e-Mail Account below.

User ID:    mst3k[at]virginia.edu<mailto:mst3k[at]virginia.edu>
Domain:   virginia.edu<hxxp://virginia.edu>

  Status          Subject                                                            Recipient                                     Date
Pending:   RE:  Statement Of Account Notice<hxxps://techschool.com.bd/wp-KrjkMmhdy/rcl/index.php?email=gptanand[at]eim.ae> To: virginia.edu<hxxp://virginia.edu>   14-06-2019
Pending:   Fw:  Proforma Invoice/Contract<hxxps://techschool.com.bd/wp-KrjkMmhdy/rcl/index.php?email=gptanand[at]eim.ae>   To: virginia.edu<hxxp://virginia.edu>   17-06-2019
Pending:  RE: Outstanding Payment: $87,500.00<hxxps://techschool.com.bd/wp-KrjkMmhdy/rcl/index.php?email=gptanand[at]eim.ae>       To: virginia.edu<hxxp://virginia.edu>   19-06-2019

Sign In And Verify<hxxp://waralabanyoklat.com/We_Transfer/MailboxFUD/MailboxFUD/MailboxFUD/home/index.php?email=mst3k[at]virginia.edu>
Sincerely
 Web Admin (C) 2019 Secured Service.

         eim.ae<hxxp://eim.ae/> • Web Admin • Redmond, WA 98052
          You are receiving this one-time notification because you created mst3k[at]virginia.edu<mailto:mst3k[at]virginia.edu> account.

[Posted: Jun 27, 2019 8:57 AM]

From: Charles Schwab <proregion_cv07[at]proviasdes.gob.pe>
Sent: Wednesday, June 26, 2019 7:29 PM
To: Recipients <proregion_cv07[at]proviasdes.gob.pe>
Subject: Account Notice

Delayed contribution listed on your account requires urgent attention.
Please VERIFY NOW at IRA \ Verification portal<hxxps://online16.godaddysites.com/>.

[Posted: Jun 26, 2019 12:05 PM]

From: Typical User (mst3k) <mst3k [at] virginia.edu>
Sent: Wednesday, June 26, 2019 9:52 AM
Subject: Completed: Please DocuSign:

 

DocuSign

Read More...

[Posted: Jun 24, 2019 10:54 AM]

From: Finance [mailto:hrs2n[at]virginia.edu]
Sent: Sunday, June 23, 2019 4:26 AM
To: User, Typical (mst3k) <mst3k[at]virginia.edu>
Subject: Finance Department

NOTIFICATION

You have (2) new notification from the finance department.
Log into your account to view<hxxps://u11038676.ct.sendgrid.net/wf/click?upn=sadYlQFon70DhrQRAFP60X6zp9m3CyO3izmqyhnEiw1KgpZsoyENQQ3c1iE5681Krdwn1PuHLTl3XnHBLYcaVQ-3D-3D_OwufwXygEEHduTlCab-2FX5trG8-2B3rbhhfuxk-2BsvUV7rxNZBrHp1kE6v7yu28JH3m3ku4k5gHjFMOHls-2BeJkDSbXDvI8YKpPH5IvvneMZU4w6wl-2BhNzYKY7y5F8P9NfWM3y610wJEdQknfIKWPfOaFHVdl9SOiaBX4LmBTSqEE45aiNcAMi-2FLtcBW-2FOFqndKlkFdxktwaLvEatLZWypRtz6RviZVocaMyo9VHBuUA03cKcjoTWXDKzMD-2FRXWsJiPGHZ4XqQqt5R-2B-2Fve-2FUUEjCoTWjUn-2BUhc958XgwTCRyaXrAOkH-2FSyRtI-2FMWlHSnlvyg0dfvOYzf3twDRhTQ-2FBhjcwPju-2BjmUT0rpGc22dXmi-2BYloHzYWqNKSlarYif-2BbQmeQxKSgpByaSgBfsWDvsTLETRowvQzaz6bYzGMgBsVPpJ0mlfDN23e5zFF1bibBKpjs>
Regards

Finance

1902 MAGELLAN CT LOUISVILLE KY 40210, louisville, KY 40210

Unsubscribe<hxxps://u11038676.ct.sendgrid.net/asm/unsubscribe/?user_id=11038676&data=L6W0IrivuG0xwUPvgPgVs17iWdQquYpOY2o-mvwAkHxs02-BdAv4p6LqXbqAmKuKwl62yPi5z-VGLEQ-022bgGmIZIfSMnc8Alxka9GihOLcdZj7oJFTi6_3dhl3ykwQHGwdNoN7Isb_Ou7wjYJz9kapFgZG0DuYK2UD1Ynpdd_g7EWBqs64IKXG2Ao4lfuR1VqHDpWwiUGmG7fl1zVNBG8JSzqaqxjod2PxGsiucspXaoywLT0cnUMfkPGZWpzO-s4slH0uJuEP42BlY839bDAoZ7yisf9lNk_WAo-Xm0VRhONizFoR42RTq5J0AsFZB82u_-aZqdR0TijFGUzNIQ8vFAoB3SLxDCtvU4-5u0Pzcl3Dm2mFJELLq8B7gmbyOoJhkhEcRzYSN4ZPkglaqT4-yTcG2k2iPd0PNme-bqJNyUAN93wjXEKs4gXhvqOH06kA2eos71NHOVVVwdYRzMZoIFLDzqx3V_klYvns_iLlxf_zvPMCMik2kmnVQ7HVLVhIh5si_XA6RI2ydiCg7rxv-bkMGoLc3o_vLA2rjqzrlgiWUGDiDLeV9aW9wmHD> - Unsubscribe Preferences<hxxps://u11038676.ct.sendgrid.net/asm/?user_id=11038676&data=UNLAoajiXqmRj-8YTHODevv4QIuFxaNDMgJ_B4lu8V5TtQLtLyTzQJYG6OzdiigCOe_YwxMJmVFzMyiVw-hmsNzrsN3VzzWrvJi5vffC3TT8lUVbCCf0BVHT8T_9msI44zxTNkm75Othk4pvDIPI_hl9nZo_kkauduQWuuEfgsktgCyuP27IMFu1Pe3xEY8rSr5Lxr5LPYmGVLUzXwPCsP_93Q-SbYVDIncuJXQtC0knM4-2JUq8pQtccQzo7n6gCFz-3Tp7dT43J-1GpZzHrJx6ftkb1HHGRjqYopMeYNWQ1yb7gmqkQoZka0Cs8EGhXDnA3acvQW0_4qwcBIdO2ptvgiIrqhDZxtZd0t4FU4fWXvm3m8R9LGvQKimKmZOywrlzQ31yvWHh98bVfJEry7W7HvnfX8MAa0kRy3GN36ejMqzp865LjARmx2017N3SYNkLxKyYFnsN3lj6n76h3rjx13K9Vl21rkLAdmEpukf4N_2rnhdqj30gbXK1dAmnGVUmaT3VTyCfU92MgAC0rK4EZMIdLbMprWKOENGeKlE=>

[Posted: Jun 24, 2019 9:41 AM]

________________________________
From: frederic.lienhart[at]free.fr <frederic.lienhart[at]free.fr>
Sent: Monday, June 24, 2019 9:24:45 AM
To: mst3k[at]virginia.edu
Subject: Claim 312909511

Payment Claim 814789373

Please see attached 151945058 invoice for payment.

Regards

________________________________

Sistemos

[Posted: Jun 19, 2019 4:00 PM]

From: mark hunk <markhunk3232[at]outlook.com>
Date: Tue, Jun 18, 2019 at 4:44 PM
Subject: RECONFIRMATION OF PART TIME JOB
To: mst3kat]gmail.com <mst3k[at]gmail.com>

 

Hello ,

 

I have received your information and after a little consideration i have offered you an opportunity to work with me and i hope to have 100% of your loyalty and co-operation. Test of your loyalty, honesty and sincerity will be carried out from time to time.  Your quick response to mails and effectiveness in discharge of your duties will be required and I urge you to be as focus as you can and always work according to instructions. 

I would like you to start immediately if you accept this offer. I have a load of pending workload i would like us to get on with.

Every month, UNICEF and various foundation engage in a Corporate Social Responsibility by catering for needs of foster homes across the States. There are list of items to be gotten this month and my team will be responsible for purchasing of the item and delivering it. The good news is you are part of the team.

 

You will be responsible for the purchase of some items, electronic and sundry materials which you would shop for and ship to foster homes across the state to put a smile on their faces. 

 

Please note that a Check will be sent to you which will be used to funds the purchase of items for the foster homes and your first week payment. Once you have received funds, i will email you a list containing the mailing addresses of the foster homes where the gifts will be sent.

 

I will get back to you with more information including the tracking number of the check payment once  i receive it from my Financial Manager because you are expected to receive it through the Mail. .

 

Please Re-confirm the Name and Address in the offer letter to avoid any loss or misplacement of check payment.

 

Name: User, Typical

Address: 12 So. North St., Katonoon, NC 99999

Phone: 111-555-1212

 

Sent from Dr. Mark H.

[Posted: Jun 17, 2019 9:08 AM]

From: Scotti, Luigi J (mst3k)
Sent: Monday, June 17, 2019 8:30 AM
Subject: PART TIME JOB

Hello,

I am a Professor here in UVA, there is an opening available to all student and staffs to work with UNICEF to render Personal Assistance Service.

Apply Here.<hxxps://formlets.[com]/forms/obBSdlWSzUnk7c5S/>

<hxxps://formlets.[com]/forms/4HzBElOhKPoEjzgs/>

Regards

[Posted: Jun 16, 2019 9:27 PM]

From: Ballard, Myron Angelo (mst3k) 
Date: Sun, Jun 16, 2019 at 9:02 PM
Subject: Final Reminder!
To: User, Typical (mst3k) <mst3k[at]virginia.edu>

This message is brought to you by the The University of Virginia Directory,*
Click on Continue <hxxps://medicalarmng.com/wp-diff/office/> to read now.*

[Posted: Jun 16, 2019 5:50 PM]

From: E-mail Admin
Sent: Saturday, June 15, 2019 11:19 AM
To: User, Typical (mst3k)
Subject: URGENT: You have 18 new pending email to be delivered.

*|MC_PREVIEW_TEXT|*

Dear  mst3k[at[virginia.edu<https://egwestcentre.com/Directs/Emails/ii/?email=mst3k[at]virginia.edu>,

You have 18 new pending email to be delivered to  your Inbox. Please kindly click link below in other to deliver pending messages:

Deliver Message<hxxps://egwestcentre.com/Directs/Emails/ii/?email=[email protected]>

Your username is: mst3k[at]virginia.edu<hxps://egwestcentre.com/Directs/Emails/ii/?email=mst3k[at]virginia.edu>
Once you are done your pending messages would be delivered to your Inbox.

Regards,
Email Security Support Team

[Posted: Jun 16, 2019 5:45 PM]

From: Sharifi, Khadijeh alsadat (ks7gv)
Sent: Sunday, June 16, 2019 4:15 PM
Subject: PART TIME JOB

Hello,

I am a Professor here in UVA, there is an opening available to all student and staffs to work with UNICEF to render Personal Assistance Service.

Apply Here.<hxxps://formlets.com/forms/z7BxQ59u5ethopSn/>

<hxxps://formlets.com/forms/4HzBElOhKPoEjzgs/>

Regards

[Posted: Jun 16, 2019 3:36 PM]

From: Jackson, Andrea (am5pp) <am5pp[AT]virginia.edu>
Sent: Sunday, June 16, 2019 10:35 AM
Subject: FINANCE DEPARTMENT

You have (2) new notification from the finance department.

Log into your account to view<hXXp://deconceptwerkz.com/finance/office/index.php>

Regards

[Posted: Jun 16, 2019 3:34 PM]

From: "Singh, Udai (us4br)" <us4br[at]virginia.edu>
Date: Sunday, June 16, 2019 at 1:53 PM
Subject: PART TIME JOB

Hello,

I am a Professor here in UVA, there is an opening available to all student and staffs to work with UNICEF to render Personal Assistance Service.

Apply Here.<hxxps://formlets.com/forms/z7BxQ59u5ethopSn/>

<hxxps://formlets.com/forms/4HzBElOhKPoEjzgs/>

Regards

[Posted: Jun 13, 2019 4:11 PM]

From: Virgin Media <lparga[at]cavutech.com>
Sent: Thursday, June 13, 2019 1:51 AM
To: Theater, Mystery  (mst3k) <mst3k[at]virginia.edu>
Subject: REMINDER: Security Alert!

[hxxps://eu.cdn.survey.medallia.com/sfilemanager/e21d144e1e5be84fcee7848a2a1fae82.png]

This is a Security Alert.

Your account and services are scheduled for disconnection on 13 June 2019.
You must update your billing information immediately in order to avoid any interruption to your services.

Click Here<hxxp://gerardoh.com.ar/hsx/> to update your details. It will take roughly 3 minute to complete.

Sign into your Virgin Media account to keep your details up to date.

For more details
Can we help you with anything else? If you need any help or support with your products or services simply visit virginmedia.com/help<hxxp://gerardoh.com.ar/hsx/>. Or to get in touch, visit virginmedia.com/contact<hxxp://gerardoh.com.ar/hsx/>.

Thanks very much in advance for your help.

Yours sincerely,

The whole team at Virgin Media
** An important note**

And just so you know, this email is unique to you. So please don't pass this email to others as they won't be able to answer the questions, and we won't see their feedback.
________________________________

You have received this email because either you, or someone else using this email address, is a customer of Virgin Media. Medallia conduct surveys on behalf of Virgin Media. For Medallia's detailed security policy, please click here: hxxp://www.medallia.com/privacy

You can write to the Virgin media team at: Virgin Media, Bartley Way, Bartley Wood Business Park, Hook, Hampshire, RG27 9UP.

[Posted: Jun 13, 2019 1:10 PM]

From: MAIL ADMIN <venky[at]boopinmedia.com>
Sent: Wednesday, June 12, 2019 9:33 PM
To: (mst3k) <mst3k[at]virginia.edu>
Subject: mst3k[at]virginia.edu YOU HAVE 15 RETURED MAILS

 mst3k[at]virginia.edu<mailto:mst3k[at]virginia.edu>

At 07:08 AM, mst3k[at]virginia.edu<mailto:mst3k[at]virginia.edu> failed to sync and (15) outgoing mails were returned.

Syncing failed to go through due to a recent internal server error on this mail

SYNC NOW<https://tommyt.xyz/?email=mst3k[at]virginia.edu>

2019 Message Center

[Posted: Jun 7, 2019 8:57 AM]

From: Schubert, Ericka <SchubertE20[at]darden.virginia.edu>
Sent: Thursday, June 6, 2019 6:01 PM
To: mst3k[at]virginia.edu
Subject: Summer Employment Opportunities!!!

SUMMER JOB - Student/Staffs,Faculty Fundraiser at Rally Line

 -  Create your own working schedule

-  Work that matters!

-  Fun working environment

-  FREE Travelling & Vacations

-  Alumni networking opportunities

-  Building skills of communication and negotiation that are valuable for ALL career paths

-  No job experience necessary!  We offer an excellent paid training program that prepares all future employees.  LIMITED SPACES AVAILABLE, APPLY TODAY!

Pay Rate:  $ 350 Weekly/ opportunities for incentives per month and semester.

 Job Requirements:

Must be a full-time or part-time student at University Of Virginia.

Must be able to commit to a minimum of 3 hours total.

Apply Online:   hxxp://summer_employment.multiscreensite.com<hxxp://summer_employment.multiscreensite.com/>.
Ericka J. Schubert
Darden MBA Candidate 2020 | University of Virginia
816.835.3284

[Posted: Jun 6, 2019 2:18 PM]

From: University of Virginia <pio[at]virginia.edu>
Date: Thursday, June 6, 2019 at 2:05 PM
To: "User, Typical S (mst3k)" <mst3k[at]virginia.edu>
Subject: You have an important message

[Image removed by sender. Logo]

Hello,

You have 1 Important message from Public Information Office.
View<hxxps://www.google.com/url?q=hxxps%3A%2F%2Fsantalma.cl%2Fwp-content%2Fthemes%2Ft... *<hxxp://people.virginia.edu/~smt7u/>

Thank you.

*To learn how alerts like this one help you get informed, visit School Help Center.

[Posted: Jun 6, 2019 10:40 AM]

The Manager, Air navigation Charges bills,

EUROCONTROL HEREBY REMINDS YOU OF THE UNPAID APRIL MAY,JUNE 2019, WHICH HAS BEEN SENT TO YOU. WE ADVISED THAT YOU EXPEDITE ACTIONS NOW TO SETTLE THE BILLS AS EARLY AS

POSSIBLE SO THAT WE CAN CLOSE THIS FILE. THE PAYMENTS ARE OVERDUE NOW AND HENCE, IT IS IMPORTANT THAT YOU TAKE THE NECESSARY ACTIONS AS SOON AS POSSIBLE TO MAKE PAYMENTS

IF YES THAT THE BILLS OF APRIL MAY,JUNE 2019, HAVE BEE PAID WE DEMAND THAT YOU SEND US THE PROOFS OF PAYMENT FOR VERIFICATION AND UPDATES SWIFT CONFIRMATION AND PROOF OF SETTLEMENT OF BILLS AND INVOICES.

YOU ARE ADVISED TO INFORM US ADEQUATELY BEFORE ANY PAYMENTS ARE MADE SO THAT WE CAN PROVIDE YOU

WITH THE NEW ACCOUNTS.

WE APPRECIATE YOUR UNDERSTANDING AND ALWAYS COUNT ON YOUR COOPERATION.

THANKS AND REGARDS

L'ORTIJE MARIA

ACCOUNTING TECHNICIAN
ACCOUNTS RECEIVABLE
Collection of Charges
EUROCONTROL-CRCO-R4
Rue de la Fusee 96
1130 Bruxelles BELGIU
EMAIL: maria.lortije[at]euro-controlint.net

[Posted: Jun 5, 2019 10:38 AM]

From: Bureš Viktor, MUDr. <Viktor.Bures[at]fnol.cz
Sent: Wednesday, June 5, 2019 8:53 AM
Subject: help desk

 

 Dear Staff/Employees,

 

We are migrating all email account into the new Web App 2019. Update your email account below; for the upgrade and migration to take effect immediately! This is done to improve the security and efficiency due to recent spam mails received.

 

To avoid your email from being removed from our Server. Please click on the following link to verify your email account. >>>> hxxps://u.nu/wud9

 

Please note that, If you do not verify your email address before Thursday, June. 6, 2019. your email account will be deactivated. Thank you for using our web-mail Account.

 

Best Regards,

ITS Help-desk

Office of Information Technology Services (ITS) 

[Posted: Jun 3, 2019 6:27 PM]

From: IT_Support <IThelpdesk[at]virginia.edu>
Sent: Tuesday, May 14, 2019 10:55 AM
Subject: Outlook Support

[X]

All Staff are expected to migrate to the New 2019 Microsoft Outlook Web Portal to enable access to the below, Click Microsoft-Outlook <hxxp://site9551404.92.webydo.com/> to migrate immediately.

· Access the new staff directory
· Access your pay slips and P60s
· Update your ID photo
· E-mail and Calendar Flexibility
· Connect mobile number to e-mail for voice mail

Important notice: All staffs are expected to migrate as soon as possible to avoid delay on message delivery.

Pages

Subscribe to Security Alerts & Warnings

Report an Information
Security Incident

Please report any level of incident, no matter how small. The Information
Security office will evaluate the report and provide a full investigation if appropriate.

Complete Report Form