Visit the Pennsylvania State University Home Page

Stop Phishing Scams

The Latest Phishes Sent to Penn Staters

  • Office of Information Security
  • Phishing Home
  • What Is Phishing?
  • How to Report a Phish

Archives for November 2016

Library Services

November 30, 2016 by Paul Carlisle Kletchka

From: xxxx xxxx <xxxxxx@gmail.com>
Date: 2016-11-30 17:22 GMT-05:00
Subject: Library Services
To: xxxxxxx@psu.edu

Dear User,

This message is to inform you that your access to your library account will soon expire. You will have to login to your account to continue to have access to the library services.
You need to reactivate it just by logging in through the following URL. A successful login will activate your account and you will be redirected to your library profile.

http://cat.libraries.psu.uaec.cf/login_…[very long string of unrelated characters]/ (<– link goes to a fake WebAccess login page)

If you are not able to login, please contact xxxx xxxx at xxxxx@psu.edu for immediate assistance.

Sincerely,

xxxx xxxx
University Libraries
Pennsylvania State University
814-86x-xxxx
xxxxx@psu.edu

Filed Under: Fake WebAccess Tagged With: bad "from" address, bad link address, generic greeting, no personalization

Pennsylvania State University / Notice

November 21, 2016 by Paul Carlisle Kletchka

Phishing message from Nov. 21, 2016 at 1:57 p.m.

From: “xxxxx, xxxxx” <xxx.xxx@apsva.us>
Sent: Monday, November 21, 2016 1:57:31 PM
Subject: Pennsylvania State University / Notice

Your mailbox is almost full.

1969MB           2000
Current size    mum size

Dear E-mail User

Your mailbox might be close kindly Staff/Faculty (<– links to a fake WebAccess page at notice-info.bugs3.com) to add more space to your mailbox.

The Pennsylvania State University © 2016

Filed Under: Fake WebAccess Tagged With: bad "from" address, generic greeting, no "to" address, no personalization, poor grammar, unclear instructions

Please Read – Email Upgrade

November 17, 2016 by Paul Carlisle Kletchka

Phishing message from November 17, 2016 at 4:55 a.m.

From: “System Adminstrator” <admin@psu.edu>
To: (many Penn State accounts were listed in this field)
Sent: Thursday, November 17, 2016 4:55:07 AM
Subject: Please Read – Email Upgrade

Please this message is important, we are expanding and upgrading all Web E-Mailbox immediately. Please CLICK HERE (<– Links to a webydo.com site that is a generic login form) and fill the form completely so we can upgrade and validate your Web E-Mailbox.

Please if you cannot access the link, send an email to staffhelpdesk@psu.edu or staffhelpdesk@outlook.com for immediate validation process. This message is from System Administrator.

Copyright © 2016 College of Education, Penn State

Filed Under: PSU Message and Generic Site Tagged With: multiple "to" addresses, no personalization, poor grammar

You have 1 new important document sent to you via Dropbox.

November 16, 2016 by Paul Carlisle Kletchka

As a reminder, Penn State is contracted with Box, not Dropbox, for cloud file storage.

Phishing Message from November 16, 2016 at 5:29 a.m.

From: “Dropbox” <no-reply@dropboxmail.com>
To: “xxxxx, xxxxx” <xxxxxx@psu.edu>
Sent: Wednesday, November 16, 2016 5:29:32 AM
Subject: You have 1 new important document sent to you via Dropbox.

You have 1 new important document sent to you via Dropbox.

Click on the Open Folder button and log in to continue to Dropbox.
Please follow the on-screen instructions to view shared document.

Open Folder (<– links to a brabetz.co.at address, which then re-directs to a tek21solutions.com site that is a fake Dropbox logon)

NOTE: You are accessing a highly secured online shared documents.

Enjoy,
– The Dropbox Team

Dropbox keeps your files safe, synced, and easy to share. To view the document, open folder and sign in with your email to continue to Dropbox. © 2016 Dropbox

Filed Under: Not Penn State-Specific Tagged With: anonymous file sharing, bad link address, no personalization

Update

November 4, 2016 by Paul Carlisle Kletchka

Phishing message from Nov. 3, 2016 at 6:15 p.m.

From: ITservicedesk@psu.edu
Sent: Thursday, November 3, 2016 6:15:05 PM
Subject: Update

Hi, Click Here (<– link to a fake WebAccess page) for the Penn state IT service update, review and most importantly leave your comments

ITservicedesk@psu.edu
☎ 814-865-HELP (4357)

Filed Under: Fake WebAccess Tagged With: bad link address, generic greeting, no "to" address, no personalization, unclear instructions

Recently Reported Phishes

  • College Employment Job scam July 3, 2024
  • “MAILBOX VALIDATION” July 23, 2018
  • “New Message For You!” July 19, 2018
  • “Service Require Important Update Due To Insufficient Bandwidth” July 18, 2018
  • “Payment Received!” July 16, 2018
  • “Account-Update” July 16, 2018
  • “A notice from Microsoft(R) Network” July 11, 2018
  • “>>>New messages are on-hold!” July 10, 2018
  • “payment received today.” July 6, 2018
  • “Psu Account User” July 3, 2018

Search for a phishing message…

All Reported Phishes – By Month

  • July 2024
  • July 2018
  • June 2018
  • May 2018
  • April 2018
  • March 2018
  • February 2018
  • January 2018
  • December 2017
  • November 2017
  • October 2017
  • September 2017
  • August 2017
  • July 2017
  • June 2017
  • May 2017
  • April 2017
  • March 2017
  • February 2017
  • January 2017
  • December 2016
  • November 2016
  • October 2016
  • September 2016
  • August 2016
  • July 2016
  • June 2016
  • May 2016
  • April 2016

Subscribe to our Phishing feed

  • RSS - Posts
This website is maintained by the Office of Information Security (OIS).
 Visit the Pennsylvania State University Home Page
Copyright 2025 © The Pennsylvania State University Privacy Non-Discrimination Equal Opportunity Accessibility Legal