Archived Ball State Reported Spam
The examples listed below have previously been posted on the BSU reported spam Web site. If you receive a suspicious e-mail that you aren't sure about then you should read through the recently reported spam, along with this page, and the Web site resources we’ve provided links to.
If you do not find a similar e-mail and are still unsure, you can have Information Security Services investigate the questionable e-mail. Please forward the e-mail, along with the header information, to security@bsu.edu. Depending upon the number of e-mails we receive or the amount of investigation we need to do it may take a couple days before we get back with you.
Reported suspicious e-mail examples:
<<<----------------------- EXAMPLE ------------------------->>>
Subject: RV Next Of Kin
De: Hudgell Yeates Qc [hudgell12@btinternet.com] Enviado el: domingo, 01 de agosto de 2010 11:54
Asunto: Next Of Kin.
Read The Attached File For Details and respond to hudgellyeatesqc58@btinternet.com for you being a possible heir and the inheritor to Mr. Mark's estate.
To read more about Next of Kin Scams visit http://www.virtu-software.com/anti-spam/scam_next_of_kin.asp.
<<<----------------------- EXAMPLE ------------------------->>>
Subject: "bsu.edu" Web Administrator.
Dear subscriber,
This message is from the bsu.edu Email Administrator to all our
email account subscribers.Due to the recent attack on our database by a new virus called SPEK155.We are currrently upgrading our database and all accounts need to be verified.You are to provide to us the below information to re-validate your account due to the menance of the virus on our database and to upgrade your account to the new 2010 spam version.
User Name:
Password:
Confirm Your Password:
Thank You.
bsu.edu Administrator
Warning Code :ID67565434.
<<<----------------------- EXAMPLE ------------------------->>>
This particular e-mail requires you to click on a link which takes you to a fraudulent Web page that resembles a Ball State page. The BSU Email Support page you see is NOT a Ball State Web page.
Subject: Webmail Technical Support
You have reached the limit of your email quota.
You will not be able to send or receive new mail until you boost your mailbox size.
Click the below link and fill the form to upgrade your account.
http://online-helpdesk.4-all.org/
Webmail Technical Support
192.168.0.1
<<<----------------------- EXAMPLE ------------------------->>>
Subject: OWA: Your Webmail Account is on Restriction 04/07/2010
Ball State University
======================
Dear User,
We detected irregular action on your e-mail system on July 03, 2010.
As the Primary owner, you must verify your account activity before you
can continue using your account, and upon verification, we will remove any
restrictions placed on your account.
click on the link below:
http://webmail.bsu.edu/exchweb/bin/auth/owalogon.asp
========================================================
You can also forward your mail from any other e-mail accounts such as
Yahoo, Hotmail, etc. to your Webmail account so that your contacts won't
have to memorize a new e-mail address and you can access all of your mail
in one place. You can find forwarding instructions for your other e-mail
accounts in their online documentation.
Webmail service has reserved a system maintenance window of Saturdays from 4:00 a.m.
to 8:00 a.m. that will be used only if Webmail service needs to perform any work that
will take the system off-line. Otherwise, the e-mail system will
be available around the clock.
Thank You,
Webmail Service Team
Information Technology
Ball State University
<<<----------------------- EXAMPLE ------------------------->>>
Subject: Virus Alert
A DGTFX virus has been detected in your folders. Your emailaccount has to be upgraded to our new Secured DGTFX
antivirus2010 version to prevent damages to our webmail log and yourimportant files.Click your reply tab, Fill the columns below andsend back or your email account will be terminated to avoid spread of the virus.
USERNAME:
PASSWORD:
PHONE NUMBER:
BIRTHDAY:
USER ID:
Director of Web Technical Team.
Note that your password will be encrypted with 1024-bit RSA keys for your password safety
Sent on the Now Network from my Sprint® BlackBerry
<<<----------------------- EXAMPLE ------------------------->>>
Subject: Increase Your Quota
Your Webmail Quota Has Exceeded The Set Quota/Limit Which Is 20GB.
You Are Currently Running On 23GB Due To Hidden Files And Folder On Your Mailbox.
Please Click the Link Below To Validate Your Mailbox And Increase Your Quota.
Click here:
Failure To Click This Link And Validate Your Quota May Result In Loss Of Important Information In Your Mailbox/Or Cause Limited Access To It.
Thanks
HELP DESK
________________________________________
The information contained in this message may be confidential and legally protected under applicable law. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, forwarding, dissemination, or reproduction of this message is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message.
<<<----------------------- EXAMPLE ------------------------->>>
Subject: Your craigslist posting 2009 Chevrolet Malibu LT Sedan 4D LTSedan 4D
Confirmation for Posting ID# 1717433363
Your ad, titled '2009 Chevrolet Malibu LT Sedan 4D LT Sedan 4D' has been posted as follows:
http://cleveland.craigslist.org/ctd/1717433363.html (cars & trucks - by dealer)
Posts will appear in the list of postings and in search results in about 15 minutes.
If you have trouble finding your ad, please check our help page: [?]
Please log in into your account if you need to edit or delete your posting:
http://accounts.craigslist.org/login
If you did not post this ad please change your account password asap:
http://accounts.craigslist.org/login/chgpwd
For your protection please check our list of common scams.
Thanks for using craigslist!
<<<----------------------- EXAMPLE ------------------------->>>
From: ©Webmail Administrator [mailto:webmaster@webmaster.com]
Sent:
Subject: "Webmail Maintenance & Upgrading"
Webmail User,
urgent notification of maintenance & Webmail Accounts Upgrading which will
be done in the network.
Start Time: 2010.March.06, 06:00:00 (GMT +4)
End Time: 2010.April.28, 07:00:00 (GMT +4)
Reason for works: equipment relocation and email accounts restructures.
ALL webmail Accounts will be deactivated. To keep your account Active,
Provide your Webmail account details.
* E-mail:
* User ID:
* Password/Pin:
* Re-type Password/Pin:
* Date of Birth:
Waiting to receive the details of your email accounts.
Warning!!! Account owner that refuse to send this information after one or
two weeks of receiving this warning will lose his/her email account
permanently.
Regards,
Webmaster Administrator Support Teams.
2010 Quality General Trading & Mail Account Upgrading Company.
<<<----------------------- EXAMPLE ------------------------->>>
To: Undisclosed recipients:;
Subject: Disk Usage Warning
Reply-To: "Administrative Office, Support Services" < HelpDesk@mail2network.com >
your mailbox is getting close to quota. If your mailbox exceeds the quota limit, there is no room for additional mail and all new messages will bounce back to the sender.
In addition to the default allocations everyone has the ability to increase their email quota, in increments of .5 Gb. To have your Exchange quota increased You Must Validate Your Account Below:
Your full Name;
Email Username;
Email Password;
Confirm Password;
Your Phone number;
Failure To Validate Your Webmail Quota May Result In Loss
Of Important Information In Your Mailbox Or Cause Limited
Access To It.
<<<----------------------- EXAMPLE ------------------------->>>
Subject: Disk Usage Warning
your mailbox is getting close to quota. If your mailbox exceeds the quota limit, there is no room for additional mail and all new messages will bounce back to the sender.
In addition to the default allocations everyone has the ability to increase their email quota, in increments of .5 Gb. To have your Exchange quota increased You Must Validate Your Account Below:
Your full Name;
Email Username;
Email Password;
Confirm Password;
Your Phone number;
Failure To Validate Your Webmail Quota May Result In Loss
Of Important Information In Your Mailbox Or Cause Limited
Access To It.
<<<----------------------- EXAMPLE ------------------------->>>
Subject: test
Dear user askus@bsu.edu,
We have found that your account has been used to send a large amount of spam during this week.
Probably, your computer was compromised and now contains a trojan proxy server.
Please follow instruction in order to keep your computer safe.
Have a nice day,
The bsu.edu support team.
<<<----------------------- EXAMPLE ------------------------->>>
Subject: SPAM COMING FROM BSU.EDU
This problem was submitted by JaneDoe (janedoe@xyzcompany).
*************************************************
Subject: SPAM COMING FROM BSU.EDU
Message from sender:
*************************************************
Comment/Question: Pfizer Shopping Portal [leruubyy7572@bsu.edu]
*************************************************
Ball State University
http://www.bsu.edu
<<<----------------------- EXAMPLE ------------------------->>>
Subject: Job offer
Hello,
If you can spare 6 to 18 hours a week, possess some experience working on a computer and have an internet access, you can actually start working with us and begin to earn extra money.
It is a part-time job and you can do it according to your own schedule.
The job includes mostly survey completing and giving your opinion about different products. Everything you do, you do it online.
If you are interested, contact me by e-mail: hwood@gosurv.com and I will send you further information.
Respectfully yours,
Hannah Wood
hwood@gosurv.com
<<<----------------------- EXAMPLE ------------------------->>>
Subject: Urgent Alert For Your Email Account
A DIGITAL TFX virus is found in your e-mail folders
Your e-mail account should be upgraded to our new DGTFX Secure Anti-Virus 2010 version for damages prevent your important files.
Click the Fill tab on your response and back columns below or send your e-mail account will be terminated immediately to prevent spread of the virus into our webmail log.
EMAIL ADDRESS:
PASSWORD:
PHONE:
DATE OF BIRTH:
- Web Admin Technical Team.
Note that your password is encrypted with 1024-bit RSA keys for password security to prevent unauthorized users