Stop Phishing Scams

The Latest Phishes Sent to Penn Staters

Multiple Subjects: Penn State University or PSU IT- Technical Support or Ticket No: 9005637728 or Penn State Technical Support Ticket No: 9005637728

by

 

From: “LEICHTNAM, CALEB” <CALEICHTNAM@rochester.k12.mn.us>
Sent: Wednesday, April 11, 2018 2:56:59 PM
Subject: Penn State University

Hello,
Thanks for contacting P.S.U Technical Desk your Ticket No is: 9005637728

Request to De-activate your PSU Email account will be completed shortly.

If you think this is an error and you want to keep your account active, please undo request HERE

[ ^ Link leads to a generic login page in the jotform.com domain ^ ]

Thanks,
Penn State University
Technical Support

 

Update

by

 

From: “Admin” <xxxxxx@psu.edu>
Sent: Monday, November 13, 2017 4:37:13 PM
Subject: Update

 

We are currently undergoing account verification on your account portal due to Penn State University account department verification process. You are required to click here [<–Link leads to a fake WebAccess page in the designrealtyteam.com domain] and verify your account within 24 hours or your payment account panel will be temporarily suspended.
Note: No charges will be made from your card upon this verification process.
 
 
Penn State University

Billing Department

You have a New File –OR– Greetings! New Memo from HR Department -OR-xxx

by

Phishing message from 1:06 p.m. on July 5, 2017

From: “Navjot Barney” <Navjot.Barney@xxx.xx>
Sent: Wednesday, July 5, 2017 1:06:14 PM
Subject: You have a New File

Greetings,

You have a message from the Human Resources Department.

Click here [<– link leads to a fake Outlook Web App login page in the telephonedepositiondirectory.com or charviassociates.net or alexender.tk domain] to view your message

Copyright © 2017 Pennsylvania State University. All rights reserved.

 

The slightly different message with the subject “Greetings! New Memo from HR Department” links to the same fake Outlook Web App login, but has a greeting that is personalized with the recipient’s email address.

psu.edu UPDATE

by

Phishing message from 1:12 p.m. on June 19, 2017

From: “xxxxxxxxx (xxxxxxxxx)” <xxxxxxxx@assumption.edu>
Sent: Monday, June 19, 2017 1:12:57 PM
Subject: psu.edu UPDATE

Dear psu.edu User,

This is to inform you that psu.edu security center is shutting down some accounts due to congestion. This notification has been sent regardless of your last login date and you are required to access your account by clicking the link below to confirm usage and enjoy uninterrupted services.

Notification Date: June 19th, 2017

To update your services; Click UPDATE [<– Link leads to a fake Zimbra login page in the 000webhostapp.com domain]

The Account Update Team at psu.edu Mail! thank you for being on the network and apologize for any inconvenience caused.

ABOUT THIS MESSAGE:

This service message was delivered to you as a psu.edu Mail ! customer to provide you with account updates and information about your account benefits.

URGENT: your penn states account expires soon

by

Phishing Message from February 6, 2017 at 9:15 a.m.

From: “Penn States IT Service Desk” <itservicedesks@pennstate.org>
To: “XXXX XXXX” <xxxxx@psu.edu>
Sent: Monday, February 6, 2017 9:15:00 AM
Subject: URGENT: your penn states account expires soon

The Password for your Penn States Account will expires in 24 hours.
To change your Password to insure it does not expire, pleas click on the following link and follow instructions on the page:

itservicedesk.psu.edu [<– Link leads to a generic login page at an address that starts with http://172.24.21.41/]

Asistance is available from IT Services Desk by calling 814-PSU-HELP, or by visiting Wagner Building, University Park.

Thank you,
IT Services Desk