Security 145A

Ball State Reported Spam

Information Security Awareness will be happy to investigate any questionable e-mail you receive, but we ask you to first investigate your suspected e-mail by using the available spam, hoax and virus Web sites we've provided links to.  If you do not find a similar e-mail then please forward to us your e-mail and the header information to security@bsu.edu.  Depending upon the number of e-mails we receive or the amount of investigation we need to do it may take a couple days before we get back with you.

This Web site only reports information that has been submitted to Ball State's Information Security Services for review.  Since there is such a high volume of spam being reported only the latest reported e-mails will be posted on this page.  Earlier reported spam will be archived.

These reported suspicious e-mail examples are NOT legitimate and should be deleted.

<<<-----------------------  EXAMPLE  ------------------------->>> 

Subject: Cms.bsu.edu Webmail Alert!

Dear Member,

Access to your webmail account has expired,
We recommend you to update your webmail account to avoid suspension.

Click the link below to update and access your webmail.

http://webmail.bsu.edu/

Thanks.
Administrator Department
www.cms.bsu.edu

<<<-----------------------  EXAMPLE  ------------------------->>>

Subject: Cms.bsu.edu Webmail Alert!

Dear Member,

Access to your webmail account has expired, We recommend you to update your webmail account to avoid suspension.

Click the link below to update and access your webmail.

http://webmail.bsu.edu/http://www.shopmrben.com/bsu.edu/auth.html

Thanks.
Administrator Department

www.cms.bsu.edu

 <<<-----------------------  EXAMPLE  ------------------------->>>

Subject: Regarding You Email Account Security

Hello there,

You are to download and update you account by clicking on the Link

Regards

Note:  This e-mail will have a link that takes you to a fraudulent Web site that looks like a Ball State authenication Web page.

<<<-----------------------  EXAMPLE  ------------------------->>>

View the following example showing where these links will take you to. 

------------------------------------------------------------------------

Subject: [info] Storage quota upgrade 

An important message about your Webmail Internet Service

Dear Valued Customer, Our records shows that you have almost exhaust your usage allowance provided with your Webmail Internet Ultra-Lite service.
Depending on your current storage capacity you may request an additional storage.
Please click here to submit request.  

Keeping track of your usage
What we will do:

  • Inform you with online notifications when you're approaching 75% and 100% of your designated usage allowance
  • Notify you with an email when you've reached 100% of your usage allowance
  • Provide you with 24/7 customer care and support, plus answers to any of your questions

What you can do: 
         ·   Track your up-to-date usage and see your past monthly usage 
        ·   Watch the monthly usage information in your member area
    ·   Learn more - click here to request additional storage space now

This e-mail (and attachment(s)) is confidential, proprietary, may be subject to copyright and legal privilege and no related rights are waived. If you are not the intended recipient or its agent, any review, dissemination, distribution or copying of this e-mail or any of its content is strictly prohibited and may be unlawful. All messages may be monitored as permitted by applicable law and regulations and our policies to protect our business. E-mails are not secure and you are deemed to have accepted any risk if you communicate with us by e-mail. If received in error, please notify us immediately and delete the e-mail (and any attachments) from any computer or any storage medium without printing a copy.

<<<-----------------------  EXAMPLE   ------------------------->>>

Subject: Validate

Your Mailbox Has Exceeded It Storage Limit As Set By Your Administrator, And You Will Not Be Able To Receive New Mails Until You Re-Validate It. To Re-Validate 
Click Here:
System Administrator

The "Click Here:" link will actually take you to a spoofed Web site (http://williamjordan.ca/formgen/use/sdgft/form1.html%20) in hopes you will provide them with your Ball State username and password.  Delete the e-mail immediately.
 <<<-----------------------  EXAMPLE  ------------------------->>> 

Subject: Credit Score Modification Alert - October

[http://alienyou.com/img/1028/barolet.jpg]

Click for your credit score

< http://alienyou.com/1c81c83ca4d409ce6ea5d1042e2d.html > [http://alienyou.com/img/1028/vishal.jpg] < http://alienyou.com/17813f10914409ce6ea5d10.htm >[http://alienyou.com/1c81c83ca4d409ce6ea5d1042e2d.jpg]< http://alienyou.com/17813f10914409ce6ea5d10.htm >

<<<-----------------------  EXAMPLE  ------------------------->>>


An important message about your Webmail Internet Service

Dear Valued Customer,

Our records show that you have almost exhaust your usage allowance provided with your webmail service. Depending on your current storage space you may request for additional storage.

Please click here to request for additional storage.   

Keeping track of your usage

What we do: 
     ·         Inform you with online notifications when you're approaching 75% and 100% of your designated usage allowance 
     ·         Notify you with an email when you've reached 100% of your usage allowance 
     ·         Provide you with 24/7 customer care and support, plus answers to any of your questions

What you can do: 
Track your up-to-date usage and see your past monthly usage
Watch the monthly usage information on your webmail
Learn more - click here to fill the storage increase form and for tips on how to manage your usage and maximize your speed

This e-mail (and attachment(s)) is confidential, proprietary, may be subject to copyright and legal privilege and no related rights are waived. If you are not the intended recipient or its agent, any review, dissemination, distribution or copying of this e-mail or any of its content is strictly prohibited and may be unlawful. All messages may be monitored as permitted by applicable law and regulations and our policies to protect our business. E-mails are not secure and you are deemed to have accepted any risk if you communicate with us by e-mail. If received in error, please notify us immediately and delete the e-mail (and any attachments) from any computer or any storage medium without printing a copy.

<<<-----------------------  EXAMPLE  ------------------------->> >
Subject: Online Services Access Blocked

Dear Customer,

Your online banking Access ID and Password have exceeded the maximum number of permissible login attempts. In order to safeguard your account from unauthorized access and fraud, your access to Graystone Bank online services (online banking, bill pay, mobile banking, online statements, and telephone banking) has been blocked.

Quickly unblock your online services access by authenticating your login credentials, identity and registering your access device.

Click here to begin

We sincerely regret any inconvenience.

Graystone Bank

<<<-----------------------  EXAMPLE  ------------------------->>>
Subject: Email Deactivation Warning

THIS MESSAGE IS FROM OUR TECHNICAL SUPPORT TEAM This message is sent
automatically by the computer. If you are receiving this message it means
that your email address has been queued for deactivation; this was as a
result of a continuous error script (code:505)receiving from this email
address. Click here and fillout the required field to resolve this problem

Note: Failure to reset your email by ignoring this message or inputing wrong information will result to instant deactivation of this email
address
<<<-----------------------  EXAMPLE  ------------------------->>>
Subject: Hi Deb

Hi Deb , it’s Ashley here, it was such a long time , how is it going with you there ? I heard that you got a new job, didn’t you? Is everything ok there ? Hey, can you believe it! I got married to Mike ! Yes I did. I tried to call but you did not answer. You have changed your number, haven’t you? Just give me your current telephone number if you read this mail. It’s really a pity that we did not see you in our wedding. I wanted to invite you so much. Well, here I’m sending you a few pics taken in our wedding :

www.vizgraphics.com/photos/ashley/

Let's keep in touch then.

Love,
Ashley & Mike
<<<-----------------------  EXAMPLE  ------------------------->>>
This e-mail contains a zip file named document.zip
Subject: Returned mail: Data format error

Dear user of bsu.edu,

We have found that your e-mail account has been used to send a large amount of spam messages during the recent week.
Probably, your computer was infected by a recent virus and now runs a trojan proxy server.

Please follow our instructions in order to keep your computer safe.

Have a nice day,
The bsu.edu team.
<<<-----------------------  EXAMPLE  ------------------------->>>
Subject: Webmail secure storage/quota upgrade

To ensure quick, responsive e-mail services, it is necessary to establish limits on the amount of e-mail each user may store on the system. The volume of e-mail you are storing on the Central e-mail system is now exceeding your normal space allocation. To request for more storage space on your webmail account, simply click here

<<<----------------------- EXAMPLE ------------------------->>>

Subject: PayPal money request canceled
Hello jhendricks@bsu.edu,
casey bunny (sales@occhialis.com) canceled the following money request:
-----------------------------------
Money request details
-----------------------------------
Amount: $48.50 USD
Date: Mar. 22, 2008
Subject: Easy Completion Of Your Order At Speleotherapy.Org. Order No 080321-153427-4120
Sincerely,
PayPal
----------------------------------------------------------------
PROTECT YOUR PASSWORD
NEVER give your password to anyone, including PayPal employees. Protect yourself against fraudulent websites by opening a new web browser (e.g. Internet Explorer or Firefox) and typing in the PayPal URL every time you log in to your account.
----------------------------------------------------------------
----------------------------------------------------------------
Copyright © 1999-2010 PayPal. All rights reserved.
Consumer advisory- PayPal Pte. Ltd., the holder of PayPal’s stored value facility, does not require the approval of the Monetary Authority of Singapore.
Users are advised to read the terms and conditions carefully.
PPID PP302

<<<-----------------------  EXAMPLE  ------------------------->>>
Subject: Re:"MyPharmacy"

http://xynuciqozuli.ucoz.ua
<<<-----------------------  EXAMPLE  ------------------------->>>

Subject: General Email Maintainance

You have reached the limit of your email quota.
You will not be able to send or receive new mail until you boost your mailbox size.

Click the below link and fill the form to upgrade your account.
http://emailaccountupgrading.9hz.com

Technical Support
192.168.0.1

<<<-----------------------  EXAMPLE  ------------------------->>>

Subject: General Email Maintainance

You have reached the limit of your email quota.
You will not be able to send or receive new mail until you boost your mailbox size.

Click the below link and fill the form to upgrade your account.

Note: Do not click on your confirmation link but Copy and paste the link below in your address bar.( http://emailaccountmaintenance.9hz.com/ ) to up grade your account.

Technical Support
192.168.0.1