Stop Phishing Scams

Please Verify Account:PSU.EDU

September 15, 2017 by mcl158

From: “Mail PSU” <sud@psu.edu> [<–not a valid psu.edu address]
To: “Recipients” <sud@psu.edu>
Sent: Friday, September 15, 2017 9:04:16 AM
Subject: Please Verify Account:PSU.EDU

Pennsylvania Technical Service

Dear User

You have less than 48hours to complete. Verify your account to continue using this service.
Continue with Verification [<–Link leads to a fake WebAccess page in the ce.unnes.ac.id domain]

However, if you do not cancel this request your account will be shutdown shortly and all your email data will be lost permanently.
Regards.

Pennsylvania Technical Service

You Have 1 New Message from ITS Service Desk

August 28, 2017 by mcl158

From: “ITS Service Desk” <its-desk-psu@mail.com>
To: “Recipients” <its-desk-psu@mail.com>
Sent: Monday, August 28, 2017 3:29:58 PM
Subject: You Have 1 New Message from ITS Service Desk

Hello,

You have 1 Important message from PSU IT Service Desk.

Thank You.

*Tо learn hоw alerts like this оne help yоu tо prоtect yоur webmail, visit School Help Center.

Office of Police and Public Safety

August 28, 2017 by mcl158

From: Redacted <xxxxx@fas.harvard.edu>
Sent: Friday, August 25, 2017 5:32:57 PM
Subject: Office of Police and Public Safety

There is a police Situation on campus, We Encourage everyone to read and follow protocol.
This message is sent Via Secured HTML Protocol Click Here to View.
[Link leads to a fake WebAccess page in the teamzero.com.cn domain–^]

Penn State University Police
20 Eisenhower Parking Deck
University Park, PA 16802
Email: kam1232@psu.edu [<–not a real address or person in authority]

You have one new message from Pennsylvania State University

August 24, 2017 by mcl158

An earlier version of this phish has the subject: “one new message from Pennsylvania State University”

From: “PSU.EDU MEMBER SERVICE” <xxxx@bu.edu>
To: “Recipients” <xxxx@bu.edu>
Sent: Thursday, August 24, 2017 2:32:00 PM
Subject: one new message from Pennsylvania State University

one new message from Pennsylvania State University

“View message” [<–Link leads to a fake WebAccess page in the bit.ly domain]

Thanks for your cooperation

Incident INC0612534-About Your Closing Portal!

August 21, 2017 by mcl158

From: “+Penn State Service Management” <itssdd@psu.edu>
To: “Recipients” <itssdd@psu.edu>
Sent: Monday, August 21, 2017 7:42:15 AM
Subject: Incident INC0612534-About Your Closing Portal!

Attention:-

Your student portal! was recently signed from an unknown Location. Please for verification to avoid closure of your Account:- CLICK HERE>>>
[^–Link leads to a fake WebAccess page in the bishopallergy.com domain]

PSU Admin office