Fordham Information Technology - Secure IT: August 2010

Monday, August 30, 2010

Your reservation is confirmed - Malicious Email Sent to the Fordham Community on 8/13/2010

This is a malicious email that has been reported. This message was received on August 13th, 2010. Please DO NOT open this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.

To: user@fordhamdham.edu
From: "L***e Vi**eva"
Date: 08/13/2010 03:11AM
Subject: Your reservation is confirmed - Ref: 60**0/21***1

Hello,

Thank you for making a booking through Allho***

This voucher confirms that you have paid $ 1,100.00 as a deposit for the cost of the rooms and services detailed below. The guest must present this voucher, along with photo identification matching the guest name on this voucher, to the hotel on check-in.

The hotel will also ask for a valid credit card on check-in. This is to cover incidental expenses like meals, drinks, laundry, etc. Guests are responsible for payment of all extra charges direct to the hotel.

Please find the details in the attachment

Wednesday, August 25, 2010

Your email quota limit - Phishing Email Sent to Fordham Community on 8/25/2010

This is another phishing email that has been reported. This message was received on or about August 25, 2010. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.

To: undisclosed-recipients:;
Subject: Your email quota limit

Your mailbox quota has exceeded the set Quota/Limit which is 20GB.
Please click the Link below to validate your mailbox and increase your quota.
hxxp://cga9n.9hz.com

Technical Support
192.168.0.1

Tuesday, August 24, 2010

Dear User- Phishing Email Sent to Fordham Community on 8/24/2010

This is another phishing email that has been reported. This message was received on or about August 24th, 2010. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu


Dear User,

We recently have determined that different computers have logged into your account, and multiple passwords failures were present before the login. Therefore your account has been limited.
To verify your account please click on
Verify My Account
below, enter the requested information and submit.
VERIFY MY ACCOUNT
We appreciate your understanding as we work to ensure account safety.
Note: Only submit your information via this secure link.
Do not submit your information via email since this is not a secure way of sending sensitive data.

You have exceeded the storage limit on your mailbox - Phishing Email Sent to Fordham Community on 8/24/2010

This is another phishing email that has been reported. This message was received on or about August 24th, 2010. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.

You have exceeded the storage limit on your mailbox You will not be able to send or receive new mail until you upgrade your email quota.
Copy the below link and fill the form to upgrade your account.
hxxp://5j6ro.9hz.com

System Administrator
192.168.0.1

Thursday, August 19, 2010

Fund Transfer - Spam Email sent to the Fordham Community on 8/19/2010.

This is another spam email that has been reported. This message was received on or about August 19th, 2010. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.


usmanadams@m***n.net> 08/19/2010 12:34 PM To usman****s167@yahoo.com cc Subject Fund Transfer

FROM DR USMAN ADAMS

please kindly read the attached business proposal and get back to me

Regards

Dr Usman adams WEB.DE DSL SOMMER-SPECIAL: Surf & Phone Flat 16.000 für nur 19,99 ¿/mtl.!*
http://web.**/DSL-Do**el-Flatre**/

Misplaced My Wallet - SCAM Email Sent to the Fordham Community on 10/14/2010

This is another scam email that has been reported. This message was received on or about August 19th, 2010. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.

Hope you get this on time? Sorry I didn't inform you about my trip to Spain for a program, I am presently in Madrid and am having some difficulties here because i misplaced my wallet on my way to the hotel where my money and other valuable things were. presently my passport and my things are been held down by the hotel management pending when i make payment.

I need you to help me with a loan of (€2,600 Euro = $3,300) to pay my hotel bills and to get myself back home. I will appreciate whatever you can afford to assist me with, I will refund the money back to you as soon as i return, let me know if you can be of any help? ASAP. I don't have a phone where i can be reached. I am so confused right now. please let me know immediately

Your help is much appreciated,
Best regards,
Bill

Wednesday, August 18, 2010

Dear Webmail Account Owner - Phishing Email Sent to the Fordham Community on 8/18/2010.

This is another phishing email that has been reported. This message was received on or about August 18th, 2010. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.


Dear Webmail Account Owner,

This message is from the University Web mail Messaging Center to all email account owners. We are currently carrying out scheduled maintenance,upgrade of our web mail service and we are changing our mail host server, as a result your original password will be reset. We are sorry for any inconvenience caused.

CONFIRM YOUR EMAIL IDENTITY NOW

E-mail Address:
User Name/Id:
Password:
Re-type Password:

Failure to do this will immediately render your email address deactivated from the University Web mail.
This E-mail is confidential and privileged. If you are not the intended Recipient please accept our apologies; Please do not Disclose, Copy or Distribute Information in this E-mail or take any action in Reliance on itscontents: to do so is strictly prohibited and may be Unlawful. Please inform us that this Message has gone astray before deleting it. Thank you for your Co-operation.
Copyright © 2010 University Web master. All Rights Reserved

We Received Your Application - Spam Email Sent to the Fordham Community on 8/18/2010.

This is another spam email that has been reported. This message was received on or about August 18th, 2010. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.

Hello

We have received your application for the position of Flight Attendant-0600003A. After careful consideration, we inform you that you have been selected for this position.

We will retain your candidate file in our database and may inform you of job openings that match your profile if you selected this option. We also invite you to visit the Career Section on our Web site regularly.

We thank you for your interest in AirTran Airways and wish you all the best in your career search.
The attached file is a copy of your application.
Sincerely,Recruiting DepartmentAirTran Airways

Monday, August 16, 2010

Order Confirmation - Spam Email Sent to the Fordham Community on 8/16/2010.

This is another spam email that has been reported. This message was received on or about August 16th, 2010. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.


To: user@fordham.edu

Subject:Order Confirmation

Thank you for shopping with Office Depot.
We are confident you will be pleased and look forward to serving you again soon.
Note that due to product availability or size, items ordered together may not be shipped together. Shipping confirmation emails will provide details on all shipments.
For your reference, below is a summary of your order:


Expected delivery date: Mon, 16 Aug 2010 06:27:51 -0800


ITEM DESCRIPTION
ENTERED ITEM #
QTY
SHIPPING
BACKORDER
UNIT PRICE
UM
EXTENDED PRICE
Smead® 100% Recycled Pressboard Classification Folders, 3 Dividers, Letter Size, Blue, Box Of 10 (0782145)
782145
3
3
0
45.880
box
$137.64





LEGEND

ENTERED ITEM #:
Entered Item Number
QTY:
Original Quantity Ordered
SHIPPING:
Ordered Quantity - Backorder Quantity
BACKORDER:
Backorder Quantity
UNIT PRICE:
Price per Individual Unit
UM:
Unit of Measure
EXTENDED PRICE:
Ordered Quantity x Unit Price


Subtotal:
$137.64
Tax:
13.42
Delivery Charge:
0.00
Misc.:
0.00

Total:
$151.06



You can now track delivery of your order online. Enter the order number shown in this email, or go to Order Tracking at OfficeDepot.com/BSD and log in to track delivery of your order by entering your order number.
Subscribe to receive email alerts about exclusive offers at Office Depot. Update your contact information and subscription preferences today!
Questions? We are taking care of business every day, and we are ready to help: Call 888.263.3423 or email us for prompt answers to all your questions.

Friday, August 13, 2010

Another candidate brought to you - Malicious Email Sent to the Fordham Community on 8/20/2010

This is a malicious email that has been reported. This message was received on August 13th, 2010. Please DO NOT open this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.

To: User@fordham.edu
From: "R***y Mcdo***gh"
Sent by: messages-noreply@bounce.linkedin.com
Date: 08/13/2010 04:53PM
Subject: Another candidate brought to you

Hi,

This is R***y Mcdo***gh working as a Technical Team Lead in IBM with over 10 years of solid mainframe development experience. I am confident that my skills will match for this requirement.

Please find the resume as a word attachment. I am available at 404-***-4001 for a discussion. BTW I am in EST time zone.

Looking forward to work with you.

Thanks
R***y

Thursday, August 5, 2010

Your Order with Amazon.com - Phishing Email Sent to the Fordham Community on 8/5/2010.

This is another phishing email that has been reported. This message was received on or about August 5th, 2010. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.


To: user@fordham.edu

Subject: Your Order with Amazon.com

Dear bank account holder,

The ACH transaction, recently initiated from your bank account (by you or any other person), was rejected by the Electronic Payments Association. Please review the transaction report attached to this letter.

Unreported/Underreported Income (Fraud Application) - Phishing Email Sent to the Fordham Community on 8/5/2010.

This is another phishing email that has been reported. This message was received on or about August 5th, 2010. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.


Taxpayer ID: bipin-000****9****24US

Tax Type: INCOME TAX

Issue: Unreported/Underreported Income (Fraud Application)

Please review your tax statement on Internal Revenue Service (IRS) website (Please find attached file - tax statement.zip):

==========================================

Internal Revenue Service

Wednesday, August 4, 2010

Occuring Problem from your FORDHAM webmail - Phishing Email Sent to the Fordham Community on 8/4/2010.

This is another phishing email that has been reported. This message was received on or about August 4th, 2010. Please DO NOT respond to this message or anything that looks like it. You may disregard and delete this message. If you have any questions about the validity of this email please contact the University Help Desk directly at 718 817-3999 or via email: helpdesk@fordham.edu.


From: help desk

Date: August 4, 2010 6:22:03 AM EDT

To: help-desk01@fordham.edu

Subject: Occuring problem from your FORDHAM webmail

Reply-To: checking.up***e@live.nl

Occuring problem from your FORDHAM webmail
THIS MESSAGE IS FROM OUR TECHNICAL SUPPORT TEAM.
This message is sent automatically by the computer. If you are
receiving this message it means that your email address has been queued
for deactivation; this was as a result of a continuous error script
(code:505)received from this email
address.
To resolve this problem you must reset your email address. In
order to reset this email address, you must reply to this e-mail by
providing us the following Information for confirmation.
Your Username: { }
Current Email Password : { }
Re-confirm Password: { }
Note: Providing a wrong information or ignoring this message will resolve
to the deactivation of This Email Address.
We apologize for any inconvinience.
FORDHAM Web Technical Support (Webmaster)

US-CERT Technical Cyber Security Alerts

IT Security - The IT Security Industry's Web Resource