Stop Phishing Scams

The Latest Phishes Sent to Penn Staters

Penn State Access Account password to expire.

by

Penn Staters continue to receive phishing messages with the subject header “Penn State Access Account password to expire.”

These messages were first reported to OIS in December of 2016 and this post alerted the Penn State community to their distribution on the Stop Phishing site on December 21, 2016.

As a reminder, you should never put your password in a response to an email message. Anyone asking you for a password via email is likely going to use it for nefarious purposes.

You have one new message from Pennsylvania State University

by

Phishing message from March 6, 2017 at 11:38 a.m.

From: PSU.EDU MEMBER SERVICE [mailto:members@psu.edu]
Sent: Monday, March 6, 2017 11:38 AM
To: Recipients <members@psu.edu>
Subject: You have one new message from Pennsylvania State University

You have one new message from Pennsylvania State University

“View message” [<– Link leads to a fake WebAccess login page in the chicanotequila.com domain]

Thanks for your cooperation

Mail Service Team @All Rights Reserved

 

Security Alert / Profile Error / Issues With Your Email / Issues With Your Account / Urgent Security Issue / Security Threat / Urgent Issue

by

Phishing Message from 5:39 a.m. on 2/27/2017

From: PSU Admin <admin@psu.edu> [mailto:dr.grosko@mymts.net]
Sent: Monday, February 27, 2017 5:39 AM
Subject: Security Alert

Dear Candidate,

Your email’s security and Defence module, are out of date. Please note that this could lead to security breach if you do not update and validate your Email.

To further protect your account, we would be suspending it if you do not validate your email security
To validate your mail security, click your email below and login to start the process.

Secure Your Account [<– link presents an “ok” button which, when clicked, opens a fake WebAccess page in the mrdangola.com domain]

Regards,
Customer Service Department.