Feed on

ITS will be performing scheduled maintenance on Saturday, July 15.  The following systems will be affected:

Wireless Access
Wireless access will be unavailable between 6 and 8 AM.

Wesfiles will be unavailable all day beginning at 7 AM.  We expect to have the service back online by 4:00 PM.

We will update our social media sites, Facebook and Twitter, as needed.



From: <geoperu@s3.mercaderiasdelperu.com>  <—Not a UPS address
Date: Thu, Jul 6, 2017 at 8:12 AM
Subject: {Filename?} New status of your UPS delivery (code: 3795159)
To: <xxxxxx@wesleyan.edu>

Warning: This message has had one or more attachments removed
Warning: (UPS-Package-3795159.zip, UPS-Package-3795159.doc.js).
Warning: Please read the “Wesleyan-Attachment-Warning.txt” attachment(s) for more information. <–Note: The attachment was removed as our scanners had already found it to be malicious.

Dear Customer,

UPS courier was unable to contact you for your parcel delivery.

Please check the attachment for details!

With anticipation,
UPS Office Agent.  <–Generic “person”/contact with no contact information to call and ask questions.

From: Billing Center <jhintz@netscape.ca>  <–Not a valid Bank of America address
Date: Wednesday, July 5, 2017 at 8:57 PM
To: “Xxxxx, Xxxx” <xxxxxxxx@wesleyan.edu>
Subject: The wire request is unsuccessful!
Thank you for choosing Bank of America.

The requested wire transfer can’t be processed. The receiver doesn’t exist. More information about this transfer is in attached document. The wire transfer amount will be refunded to your account in three business days.

Bank of America Corp.


There is an attachment associated with this email.  Please, do NOT open or click this attachment. 

From: “Quesenberry, Peter” <PQuesenberry@Lifespan.org>  <–Not a Wesleyan address
Date: 5 July 2017 at 1:41:25 PM GMT-4
To: “Quesenberry, Peter” <PQuesenberry@Lifespan.org>  <–Not a Wesleyan address
Subject: Faculty\Staff IT Service
To All Users,
We are currently upgrading our Server to 50GB inbox space and we have noticed your Email has almost elapsed. Your  outgoing emails will not be delivered by our server until we have you account confirmed, as to protecting your email account is our primary priority. For Web mail account update Click on Outlook Web Access  <–Hover and this will show a non-wesleyan address….CHHTP://ithelp-ithelp.c9users.io/OWA/Outlook/xxxxxx/
Connected to Microsoft Exchange
© 2017 Microsoft Corporation. All rights reserved.
This transmission is intended only for the addressee(s) listed above and may contain information that is confidential. If you are not the addressee, any use, disclosure, copying or communication of the contents of this message is prohibited. Please contact me if this message was transmitted in error.
Google Documents <james@consultechmgt.com>
accounting@wesleyan.edu has shared a document through Google Docs.

Thank You

© 2017 Google

The “View Document” link is a false link and redirects you to a malware download. And th originating sender is not a Wesleyan Address.


This came with an attachment that is infected with malware. Never click on an attachment you are not expecting or have a sense is not legitimate. If you aren’t sure about an email or attachment from a known colleague/contact or were not expecting anything for them then call or email them. Ask if they had sent an attachment. Ask what it is about. Don’t be afraid of taking extra steps to keep Wesleyan and yourself at home, safe. 

From: Central Michigan University [mailto:outlookverification2@virginmedia.com]  <–Not a Michigan address–not the same as the originating school/company name
Sent: Tuesday, June 27, 2017 1:31 PM
Subject: CMU: Webmail Account Verification Alert!
Dear CMU User,
We noticed your CMU Webmail account has almost exceed it’s limit.And you may not be able to send or receive messages any moment from now.
Click Here To Renew Your Webmail Account. <[http://www[DOT]rci[DOT]stavsu[DOT]ru/administrator/backups/login%5bDOT%5dhtml]http://www[DOT]rci[DOT]stavsu[DOT]ru/administrator/backups/login[DOT]html>
Failure to renew your CMU Webmail account. It will be permanently disabled.
| CMU. ICT Department…
Copyright Central Michigan University.
From: ADP Payroll [run.payroll.invoice@performancesales.com]  <— Not an ADP nor Wesleyan address
Sent: Monday, June 26, 2017 1:08 PM
To: Carrier-Brault, Roslyn
Subject: ADP Payroll Invoice for week ending 06/24/2017 – 02406. Invoice: 00162774
Your ADP Payroll invoice for last week is enclosed for your review. If you have any questions regarding this invoice, please contact your ADP service team at the number provided on the invoice for assistance.
Please click below to view your invoice:
ADP INVOICE 00162774  <—- This link, if hovered over, would show the following modified address that is NOT associated in any way with ADP (http://enrollinstantly.com/file.php?document=cmJyYXVsd0000000000bi5lZHU=)
Thank you for choosing ADP Payroll.
Important: Please do not respond to this message. It comes from an unattended mailbox.
From: Denise El Havat Pickler [mailto:denisepickler@camarapoa.rs.gov.br]  
Sent: Saturday, June 24, 2017 6:41 PM
Subject: 1,650,000,00 Euros.
Your email has been registered and insured with the sum of 1,650,000,00 Euros. For more information please contact : onuwu17@qq.com

My Friendly Greetings
Denise El Havat Pickler
This is SPAM and not really a phishing email but does give reference to having your email registered.  It is completely, fake. (SPAM tries to trick you out of money. PHISHING email try to trick you to providing your credentials for nefarious purposes)

From: “U.S. Tax Court” <tegvi@geheimserver.de>  <–Not a US Governmental web designation. That’s “.gov”
Reply-To: “tegvi@geheimserver.de” <tegvi@geheimserver.de>  <–Not a US Governmental web designation
Date: Thursday, June 15, 2017 at 10:43 PM
To: “xxxxx, xxxxx” <xxxxx@wesleyan.edu>
Subject: Tax Notification #5693896

U.S. Tax Court ext#5693869

We inform you that you were suspected in violating of the U.S Federal law under “Title 26 USC § 7201 – Attempt to evade or defeat tax”.

The case hearing will be held on 06/17 at 2:30PM in room 6B. Case number is 228-157643.

In case you or your representative are not able to face the court on the this day, please inform us by sending a respond to this email with the specified reason. The response has to be sent not later than 10 workdays before the first hearing.

List of documents you have to provide in court and additional information can be found in an attached file.

Tax Notification  <–this points to a Googledoc. The US Government would not use googledocs. Additionally, they do not email.  They only use the US Postal Service. 

Deirdre Quinn,  <–non-existant person
Chief Secretary Prosecutor,  <–non-existant position
400 Second Street, N.W., Washington, DC 20217

« Newer Posts - Older Posts »

Log in