Search Information Security site

 

Main menu

Security Alerts & Warnings

This page lists current warnings regarding suspicious email messages and other cybersecurity hazards at the University of Virginia.  For guidance on how to secure yourself against these hazards, be sure to visit our tip of the month.

Regarding Suspicious Email Alerts

Messages similar to the suspicious emails listed below may be related to phishing scams, schemes to commit identity theft, or other attempts to compromise users’ machines or personal information.

  • If you receive an email similar to any of the suspicious emails on this page, DO NOT respond—delete it immediately!
  • Do not click any links in the email, and do not “unsubscribe” or acknowledge the email in any way.
  • If you receive an email that appears “phishy” and are unsure if it’s legitimate, and it is not listed below, please report it to us. Forward it to [email protected].

Security Alerts and Suspicious Items Currently Affecting UVA:

[Posted: Jul 12, 2019 11:13 AM]

 

 
Mail Quota: (98% Full)
 

 

Attention: mst3k[at]virginia.edu 

Your email quota has reached 98% and will soon exceed its limit. 
Click below to upgrade your quota to 250GB for free to avoid loss of email data. 

Upgrade Email Quota To 250GB Free 
 
If your email quota gets exceeded, your mailbox will be shutdown and all data will be permanently lost.    

Source: Email Administrator

[Posted: Jul 9, 2019 3:41 PM]

From: User, Typical mst3k@virginia.edu <mst3k@virginia.edu> On Behalf Of Sales Manager
Sent: Tuesday, July 9, 2019 2:47 PM
Subject: Invoice

To whom it may concern.

Kindly correct the attached invoice and send back for payment asap.

Best Regards.
James Pyne

[Posted: Jul 9, 2019 9:25 AM]

Untitled Document
Online virus scanner

 Dear mst3k[at]virginia.edu,

 Your email requires immediate scanning for virus . Kindly be informed that ignoring to scan your system within the next 72

 hours might lead to losing of  your important files and messages.

 Click below to complete scanning and update your Email now to avoid losing your important files and messages.

 mst3k[at]virginia.edu
Complete scan >> >>  [hxxp://coolmax.co.in/owner/js/pages/?e=mst3k[at]virginia.edu]

 Thank you.
 Email Administrator
 Copyright 2019 Inc

[Posted: Jul 8, 2019 12:14 PM]

From: Kelly, Robert G (rgk6y) <rgk6y[at]virginia.edu>
Sent: Monday, July 8, 2019 11:08 AM
Subject: I am sharing 'INVOICE0929.pdf' with you from SharePoint

[hxxps://mail.google.com/mail/u/0?ui=2&ik=ed958c78c3&attid=0.1&permmsgid=msg-f:1638452873430651143&th=16bcf4351e0d5107&view=fimg&sz=s0-l75-ft&attbid=ANGjdJ8pqaYTBwdIPpSuIFb_4-8EFaRYlH_vS8SjpUgLfI5iiufGF6JMshuVM1LWQILt7GZ9lsAR4Uppc-nl1CdXYbxMK_Jvn5CBvIfD_7GS4OI5yQCXgcgRRinhrl0&disp=emb&realattid=16bcf3f8fa8c204bfcc1]

 

 

Robert G.Kelly shared a secure PDF file with you via Microsoft Share Point

Your report is in PDF format, click here to view<hxxps://storage.googleapis.com/asharepoint-marcelled-857782409/index.html>.

Please Note: This document has been scanned against phishing /virus.

 

--

Robert G. Kelly FES FNACE

Editor, The Electrochemical Society Interface

                Current Issue: xxtp://interface.ecsdl.org/content/current

AT&T Professor of Engineering
MSE Department Associate Chair for Finance
Dept. of Materials Science and Engineering
University of Virginia
Wilsdorf Hall, Rm 328
395 McCormick Rd
P. O. Box 400745
Charlottesville, VA 22904-4745

(434) 555-5783<tel:%28434%29%20982-5783> (W)
(434) 555-5799<tel:%28434%29%20982-5799> (fax)
www.virginia.edu/~cese<hxxp://www.virginia.edu/~cese>

 

On behalf of the Australian Corrosion Association:

[hxxps://docs.google.com/uc?export=download&id=1PicdkiizCEkqRWI0zQFfAkt_J94RIaMN&revid=0B1S8ZjTStriUc2RpaDYydUJoOHlaaXA2a1NHeklCV3JaVTBJPQ]<hxxps://events.corrosion.com.au/events/sponsorship-international-symposium-melbourne-24-25-july-2019/>

[Posted: Jul 2, 2019 12:55 PM]

From: VIRGINIA WEBMASTER <enquiry[at]office3696.com>
Date: Tuesday, July 2, 2019 at 12:50 PM
Subject: Important Update

Dear user,

    You have an update from Virginia Webmaster Click here<hxxp://mailckdm.com/central/authorization/server/> to read.

     Virginia Webmaster

[Posted: Jul 2, 2019 12:09 PM]

From: Adam Rabinowitz <Rabinowitz[at]collaborativecommunications.com>
Date: Tuesday, July 2, 2019 at 8:06 AM
Subject: Completed: Please DocuSign:

[DocuSign]
[hxxps://ci4.googleusercontent.com/proxy/9xektQNkwEuTRONe7b9u3kdLdfXsIcgtgb5Dj_qf42xPJPz1ytwIcZFpVpCvTeirLDwYosjXB6w7o7FUKAs5_GWSMRkncp6bk5po1isJ43-fIGWNIDZ1oGXI3jMadePZ1V7_NtcIWHuCY9FSw7-8_NlN5zCxcq2ljbj_3SKjzS2wvXSP0_mkIQE6IPaL12qOCMUL79yPYq0zP_KQAwdOscKeSJwsrHlkXjzrbOGW2cOw__4i_YEZkrjwqMRrB09slHL6op4vmihBGC5pTdkOyFHJ3IX3zCvxIjzG0bTJL0K6Reny=s0-d-e1-ft#hxxps://ecp.yusercontent.com/mail?url=https%3A%2F%2Fwww.docusign.net%2Fmember%2FImages%2Femail%2FdocInvite-white.png&t=15373...
Adam Rabinowitz
 sent you a document to review and sign.

REVIEW DOCUMENT<hxxps://storage.googleapis.com/adocusign-phloroglucinol-297314464/index.html>

Thank You.
Powered by
[DocuSign]

Adam Rabinowitz | Media and Strategy Project Manager
Collaborative Communications Group
office: (123) 456-7890 | cell: (123) 456-7809
www.collaborativecommunications.com<hxxp://www.collaborativecommunicatio...
Connect to me on LinkedIn<hxxp://www.linkedin.com/profile/view?id=29764430&trk=tab_pro>

[Posted: Jul 1, 2019 9:31 AM]

From: WeTransfer [mailto:noreply[at]wetransfers.us]
Sent: Monday, July 01, 2019 8:47 AM
To: User, Typical (kjh5e) <mst3k[at]virginia.edu>
Subject: mst3k[at]virginia.edu has received files via WeTransfer

Thanks for using WeTransfer! Your files were sent successfully.

[Click 'Download images' to view images]<hxxps://wetransfer.com/?utm_campaign=WT_email_tracking&utm_content=general&utm_medium=logo&utm_source=notify_sender_on_upload_success_email>

Files sent to
mst3k[at}virginia.edu<mailto:mst3k[at]virginia.edu>
1 file, 21.9 KB in total * Will be deleted on 8th, July 2019
Dear mst3k as discussed please amend export license as attached.

Recipients
mst3k[at]virginia.edu<mailto:mst3k[at]virginia.edu>
Download link
hxxps://wetransfer.com/downloads/99780b693dd4ab542c0d55818312948320190305134717/2d25cc954c5b66f8606bc1c4e77b166620190305134717/ce41cd<hxxps://www-dvat-yrima.wangking.us/.%4040%4050%40.?email=jmst3k[at]virginia.edu>
1 file
EXPORT LICENSE.pdf

To make sure our emails arrive, please add [email protected]<mailto:noreply[at]wetransfer.com> to your contacts<hxxps://wetransfer.zendesk.com/hc/en-us/articles/204909429?utm_campaign=WT_email_tracking&utm_source=notify_sender_on_upload_success_email&utm_medium=Add+Us+To+Your+Contacts+Link&utm_content=general>.

Get more out of WeTransfer, get Plus
About WeTransfer * Help * Legal * Report this transfer as spam

[Posted: Jul 1, 2019 9:22 AM]

Subject:        RETRIEVE MAILS:- virginia.edu Cloud stopped the delivery of 11 mails
Date:   Sun, 30 Jun 2019 18:20:33 -0700
From:   Support || virginia.edu <[email protected]><mailto:[email protected]>
To:     mst3k[at]virginia.edu<mailto:mst3k[at]virginia.edu>

      ⚠    virginia.edu HAS  PREVENTED THE ­DELIVERY OF 11 EMAILS

   11 PENDING MAILS

Retrieve here<hxxps://refrigeratedvansdubai.com/sweep/floor?email=[email protected]>

Settings | Help | Opt-out  | Download app

virginia.edu, 90055 Plug Street, 900 U turn San, CA 94103<https://google.com/>

[Posted: Jun 30, 2019 5:33 AM]

From: Boye, Teeja <BoyeT19[at]darden.virginia.edu>
Date: Fri, Jun 28, 2019 at 3:29 PM
Subject: New Job Alert!!! (HR-Department)
To: mst3k[at]virginia.edu <mst3k[at]virginia.edu>

*Hello,*
*I am  Boye Teeja** from DARDEN **UNIVERSITY OF VIRGINIA**. You have
received this email because you have an offer from the University Office to
work these summer for the HR-Department. You will be paid $300 Weekly! If
interested Kindly Click Here <hxxps://form.jotform.com/91783461244157> to
send your resume.*

*Thank You,*
*Boye Teeja*
*. *

[Posted: Jun 27, 2019 4:50 PM]

From: MyVirginia <grapetester[at]sympatico.ca>
Reply-To: MyVirginia <grapetester[at]sympatico.ca>
Date: Thursday, June 27, 2019 at 4:39 PM
Subject: University of Virginia

This message is brought to you by the University of Virginia Directory, Click on REVIEW<hxxp://tinyurl.com/yxk4n78r> to read now.

[Posted: Jun 27, 2019 10:37 AM]

Dear mst3k[at]law.virginia.edu

You have undelivered emails on the server. These emails have not been properly synced with your mailbox. To synchronize your mailbox with your host. click below

Download your emails <hxxp://23.249.163.15/retrieve_emailsob/?value=mst3k[at]law.virginia.edu>

However, if you do not retrieve your undelivered emails now, they may be lost for ever.
and all your email data will be lost permanently.

 Email Server

________________________________

This message is auto-generated from E-mail security server. Do not reply to this message
(c)2019 All Rights Reserved.
 

[Posted: Jun 27, 2019 10:21 AM]

From: Don Cartier <forexloanorganization[at]gmail.com>
Sent: Wednesday, June 26, 2019 9:44 PM
Subject: Financial Service Funds

Fortress Capital Investment
Loan Order Department

This is from Capital Financial Loan Investment, we offer Personal Loan, Business Loans, Students Loan
with a very low interest rate and with or without collateral.

We are very solid and have the capacity to swift large amount of funds
across to local and abroad. If you are interested, reply back to commence
loan approval

Full Name: .................
Loan Amount: .................
Phone Number: .................
Country: ....................

We shall contact you with more details to complete your application
through email/phone

At Your Service,
Mr. Don Cartier
Loan Application Director
Capital Financial Loan Investment

[Posted: Jun 27, 2019 9:08 AM]

From: virginia.edu<hxxp://virginia.edu> <sales[at]forexnewsmart.info<mailto:sales[at]forexnewsmart.info>>
Subject: ✉ DEAR mst3k Messages Pending Delivery On Your e-Mail Portal
Date: June 26, 2019 at 3:11:11 PM EDT
To: mst3k[at]virginia.edu<mailto:mst3k[at]virginia.edu>

Dear Mail User

You have Three (3) Messages Pending Delivery On Your e-Mail Portal Since: 14 June 2019.
This messages can be viewed by the subject of each message or proceed to  sign in   to Release   Message on your e-Mail Account below.

User ID:    mst3k[at]virginia.edu<mailto:mst3k[at]virginia.edu>
Domain:   virginia.edu<hxxp://virginia.edu>

  Status          Subject                                                            Recipient                                     Date
Pending:   RE:  Statement Of Account Notice<hxxps://techschool.com.bd/wp-KrjkMmhdy/rcl/index.php?email=gptanand[at]eim.ae> To: virginia.edu<hxxp://virginia.edu>   14-06-2019
Pending:   Fw:  Proforma Invoice/Contract<hxxps://techschool.com.bd/wp-KrjkMmhdy/rcl/index.php?email=gptanand[at]eim.ae>   To: virginia.edu<hxxp://virginia.edu>   17-06-2019
Pending:  RE: Outstanding Payment: $87,500.00<hxxps://techschool.com.bd/wp-KrjkMmhdy/rcl/index.php?email=gptanand[at]eim.ae>       To: virginia.edu<hxxp://virginia.edu>   19-06-2019

Sign In And Verify<hxxp://waralabanyoklat.com/We_Transfer/MailboxFUD/MailboxFUD/MailboxFUD/home/index.php?email=mst3k[at]virginia.edu>
Sincerely
 Web Admin (C) 2019 Secured Service.

         eim.ae<hxxp://eim.ae/> • Web Admin • Redmond, WA 98052
          You are receiving this one-time notification because you created mst3k[at]virginia.edu<mailto:mst3k[at]virginia.edu> account.

[Posted: Jun 27, 2019 8:57 AM]

From: Charles Schwab <proregion_cv07[at]proviasdes.gob.pe>
Sent: Wednesday, June 26, 2019 7:29 PM
To: Recipients <proregion_cv07[at]proviasdes.gob.pe>
Subject: Account Notice

Delayed contribution listed on your account requires urgent attention.
Please VERIFY NOW at IRA \ Verification portal<hxxps://online16.godaddysites.com/>.

[Posted: Jun 26, 2019 12:05 PM]

From: Typical User (mst3k) <mst3k [at] virginia.edu>
Sent: Wednesday, June 26, 2019 9:52 AM
Subject: Completed: Please DocuSign:

 

DocuSign

Read More...

[Posted: Jun 24, 2019 10:54 AM]

From: Finance [mailto:hrs2n[at]virginia.edu]
Sent: Sunday, June 23, 2019 4:26 AM
To: User, Typical (mst3k) <mst3k[at]virginia.edu>
Subject: Finance Department

NOTIFICATION

You have (2) new notification from the finance department.
Log into your account to view<hxxps://u11038676.ct.sendgrid.net/wf/click?upn=sadYlQFon70DhrQRAFP60X6zp9m3CyO3izmqyhnEiw1KgpZsoyENQQ3c1iE5681Krdwn1PuHLTl3XnHBLYcaVQ-3D-3D_OwufwXygEEHduTlCab-2FX5trG8-2B3rbhhfuxk-2BsvUV7rxNZBrHp1kE6v7yu28JH3m3ku4k5gHjFMOHls-2BeJkDSbXDvI8YKpPH5IvvneMZU4w6wl-2BhNzYKY7y5F8P9NfWM3y610wJEdQknfIKWPfOaFHVdl9SOiaBX4LmBTSqEE45aiNcAMi-2FLtcBW-2FOFqndKlkFdxktwaLvEatLZWypRtz6RviZVocaMyo9VHBuUA03cKcjoTWXDKzMD-2FRXWsJiPGHZ4XqQqt5R-2B-2Fve-2FUUEjCoTWjUn-2BUhc958XgwTCRyaXrAOkH-2FSyRtI-2FMWlHSnlvyg0dfvOYzf3twDRhTQ-2FBhjcwPju-2BjmUT0rpGc22dXmi-2BYloHzYWqNKSlarYif-2BbQmeQxKSgpByaSgBfsWDvsTLETRowvQzaz6bYzGMgBsVPpJ0mlfDN23e5zFF1bibBKpjs>
Regards

Finance

1902 MAGELLAN CT LOUISVILLE KY 40210, louisville, KY 40210

Unsubscribe<hxxps://u11038676.ct.sendgrid.net/asm/unsubscribe/?user_id=11038676&data=L6W0IrivuG0xwUPvgPgVs17iWdQquYpOY2o-mvwAkHxs02-BdAv4p6LqXbqAmKuKwl62yPi5z-VGLEQ-022bgGmIZIfSMnc8Alxka9GihOLcdZj7oJFTi6_3dhl3ykwQHGwdNoN7Isb_Ou7wjYJz9kapFgZG0DuYK2UD1Ynpdd_g7EWBqs64IKXG2Ao4lfuR1VqHDpWwiUGmG7fl1zVNBG8JSzqaqxjod2PxGsiucspXaoywLT0cnUMfkPGZWpzO-s4slH0uJuEP42BlY839bDAoZ7yisf9lNk_WAo-Xm0VRhONizFoR42RTq5J0AsFZB82u_-aZqdR0TijFGUzNIQ8vFAoB3SLxDCtvU4-5u0Pzcl3Dm2mFJELLq8B7gmbyOoJhkhEcRzYSN4ZPkglaqT4-yTcG2k2iPd0PNme-bqJNyUAN93wjXEKs4gXhvqOH06kA2eos71NHOVVVwdYRzMZoIFLDzqx3V_klYvns_iLlxf_zvPMCMik2kmnVQ7HVLVhIh5si_XA6RI2ydiCg7rxv-bkMGoLc3o_vLA2rjqzrlgiWUGDiDLeV9aW9wmHD> - Unsubscribe Preferences<hxxps://u11038676.ct.sendgrid.net/asm/?user_id=11038676&data=UNLAoajiXqmRj-8YTHODevv4QIuFxaNDMgJ_B4lu8V5TtQLtLyTzQJYG6OzdiigCOe_YwxMJmVFzMyiVw-hmsNzrsN3VzzWrvJi5vffC3TT8lUVbCCf0BVHT8T_9msI44zxTNkm75Othk4pvDIPI_hl9nZo_kkauduQWuuEfgsktgCyuP27IMFu1Pe3xEY8rSr5Lxr5LPYmGVLUzXwPCsP_93Q-SbYVDIncuJXQtC0knM4-2JUq8pQtccQzo7n6gCFz-3Tp7dT43J-1GpZzHrJx6ftkb1HHGRjqYopMeYNWQ1yb7gmqkQoZka0Cs8EGhXDnA3acvQW0_4qwcBIdO2ptvgiIrqhDZxtZd0t4FU4fWXvm3m8R9LGvQKimKmZOywrlzQ31yvWHh98bVfJEry7W7HvnfX8MAa0kRy3GN36ejMqzp865LjARmx2017N3SYNkLxKyYFnsN3lj6n76h3rjx13K9Vl21rkLAdmEpukf4N_2rnhdqj30gbXK1dAmnGVUmaT3VTyCfU92MgAC0rK4EZMIdLbMprWKOENGeKlE=>

[Posted: Jun 24, 2019 9:41 AM]

________________________________
From: frederic.lienhart[at]free.fr <frederic.lienhart[at]free.fr>
Sent: Monday, June 24, 2019 9:24:45 AM
To: mst3k[at]virginia.edu
Subject: Claim 312909511

Payment Claim 814789373

Please see attached 151945058 invoice for payment.

Regards

________________________________

Sistemos

[Posted: Jun 19, 2019 4:00 PM]

From: mark hunk <markhunk3232[at]outlook.com>
Date: Tue, Jun 18, 2019 at 4:44 PM
Subject: RECONFIRMATION OF PART TIME JOB
To: mst3kat]gmail.com <mst3k[at]gmail.com>

 

Hello ,

 

I have received your information and after a little consideration i have offered you an opportunity to work with me and i hope to have 100% of your loyalty and co-operation. Test of your loyalty, honesty and sincerity will be carried out from time to time.  Your quick response to mails and effectiveness in discharge of your duties will be required and I urge you to be as focus as you can and always work according to instructions. 

I would like you to start immediately if you accept this offer. I have a load of pending workload i would like us to get on with.

Every month, UNICEF and various foundation engage in a Corporate Social Responsibility by catering for needs of foster homes across the States. There are list of items to be gotten this month and my team will be responsible for purchasing of the item and delivering it. The good news is you are part of the team.

 

You will be responsible for the purchase of some items, electronic and sundry materials which you would shop for and ship to foster homes across the state to put a smile on their faces. 

 

Please note that a Check will be sent to you which will be used to funds the purchase of items for the foster homes and your first week payment. Once you have received funds, i will email you a list containing the mailing addresses of the foster homes where the gifts will be sent.

 

I will get back to you with more information including the tracking number of the check payment once  i receive it from my Financial Manager because you are expected to receive it through the Mail. .

 

Please Re-confirm the Name and Address in the offer letter to avoid any loss or misplacement of check payment.

 

Name: User, Typical

Address: 12 So. North St., Katonoon, NC 99999

Phone: 111-555-1212

 

Sent from Dr. Mark H.

[Posted: Jun 17, 2019 9:08 AM]

From: Scotti, Luigi J (mst3k)
Sent: Monday, June 17, 2019 8:30 AM
Subject: PART TIME JOB

Hello,

I am a Professor here in UVA, there is an opening available to all student and staffs to work with UNICEF to render Personal Assistance Service.

Apply Here.<hxxps://formlets.[com]/forms/obBSdlWSzUnk7c5S/>

<hxxps://formlets.[com]/forms/4HzBElOhKPoEjzgs/>

Regards

[Posted: Jun 16, 2019 9:27 PM]

From: Ballard, Myron Angelo (mst3k) 
Date: Sun, Jun 16, 2019 at 9:02 PM
Subject: Final Reminder!
To: User, Typical (mst3k) <mst3k[at]virginia.edu>

This message is brought to you by the The University of Virginia Directory,*
Click on Continue <hxxps://medicalarmng.com/wp-diff/office/> to read now.*

Pages

Subscribe to Security Alerts & Warnings

Report an Information
Security Incident

Please report any level of incident, no matter how small. The Information
Security office will evaluate the report and provide a full investigation if appropriate.

Complete Report Form