Select Page

Latest Phishing Scams

**** Multiple emails have been posted to avoid confusion.  Each example has been separated by ### ****

########################################################################################
From: "Chhetri, Shweta" <shweta@seas.harvard.edu>
Subject: UCLA Police Department
Date: November 3, 2017 at 9:27:18 PM PDT
To: undisclosed-recipients: ;
 
There is a police Situation on campus, We Encourage everyone to read and follow protocol.

This message is sent Via Secured HTML Protocol Click Here <http://store.rotaryana-engineering.com/wp-content/final/> to View.
 
Thanks,
601 Westwood Plaza
Los Angeles, CA 90095

 

########################################################################################
From: “Bedell, Timothy” <TBedell@dot.nyc.gov>
To: “Bedell, Timothy” <TBedell@dot.nyc.gov>
Subject: RE: Mailbox Quota Exceeded !
Date: Tue, 3 Oct 2017 09:13:59 +0000 (6 hours ago)
________________________________
From: Bedell, Timothy
Sent: Tuesday, October 03, 2017 5:01 AM
Subject: RE: Mailbox Quota Exceeded !

[cid:541a94e6-8708-4634-aab8-40e638ac1f14]

You Have Exceeded the Limit of your Mailbox Quota. You will not be able to send or receive new E-mail until you boost your Mailbox Size,
CLICK HERE   <http://interest3.000webhostapp.com/> to Upgrade your Account.

©Technical Support
Copyright 2017, Webmail Maintenance, All Rights Reserved

*************************************************************************************************************************************************************************
This message and any attachments are solely for the individual(s) named above and others who have been specifically authorized to receive such and may contain information which is confidential, privileged or exempt from disclosure under applicable law.  If you are not the intended recipient, any disclosure, copying, use or distribution of the information included in this message and any attachments is strictly prohibited.  If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments.
Thank you.

NYC – Department of Transportation
*************************************************************************************************************************************************************************
########################################################################################

2016/12/06 URGENT NOTICE FROM CAMPUS REGARDING RANSOMWARE:

The email appears to come from office@”department”.ucla.edu where “department” is the name of the unit to which the phishing message is directed.   The subject of the email is “Scanned image from MX2310U@department.ucla.edu” with the unit name similarly substituted.

If you receive this email, do not open any attachments and immediately delete the message. Note that a sample of this email is shown below:

phishing_scam

Email sent to HSSEAS addresses with .zip attachments will not be delivered. Instead the user will receive an email saying that the message has been blocked along with instructions about what to do if you were expecting an email message with an attachment.

#############################################################

EMAIL ISSUED BY CAMPUS to Warn of Phishing Being sent:

To the Campus Community:
Be advised there is a Phishing email message being sent throughout UCLA claiming to be from Bruin Alert
and asking you to log-in to confirm your credentials. If you receive the message, please take no action and
immediately delete it.
FYI, the message has a couple of telltale signs to look for when trying to determine the validity of a questionable email:
1.
The email address of the sender is not actually the same as the name of the sender (in this case, it isn’t even a ucla.edu email address).
2.
Very poor grammar and spelling.
A copy of the message is below for your reference. Please feel free to reach out to me with any questions or concerns.
Sincerely,
Michael Story
Interim Chief Information Security Officer
Information Technology Services
——– Original message ——–
From: UCLA Bruin ALert ‹
Date: 6/18/16 5:40 PM (GMT-08:00)
To:
Subject: UCLA Bruin Alert
Dear user;
Because of the recent shooting in school, the school authority has upgraded the email portal of every students and staffs of the school.
You are advice to log-on here to confirm if your login credentials in other to allow the recent upgrade on your device.
The upgrade is been done to beef up our security network technologically.
Regards,
The UCLA Bruin Alert
###################################################################