Feed on

From: “Wesleyan University Library” <libraries@wesleyan.com> –>Convincing looking “From” address.
Date: Sep 11, 2017 5:08 PM
Subject: Library Notifications
To: a wesleyan person

Dear Student,

This is to inform you that your access to Wesleyan University Library Databases will expire soon. Due to security precautions established to protect Wesleyan University Libraries System, you have to renew your library account on a regular base, so please use the following link

libraries.wesleyan.edu/myaccount/reactivation.htm  –> Where this really goes–https://go.qub.ac.uk/ssowesleyanedu  If you hover over the blue link you would see this real address redirect

After your successful authentication, your access will be restored automatically and you will be redirected to the university library homepage. If you are unable to log in, please contact the library help desk for immediate assistance. We apologize for any inconveniences this may have caused.

Thank you,

Libraries | Wesleyan University   —>Convincing signature
45 Wyllys Avenue
Middletown, CT 06459
Fax: 860-685-2000


The “Wesleyan University” address is actually, ryry@coultercomm.com.  Not a Wesleyan Address.

TheCLICK HERE is a downloadable malware package. It is not a web Redirect and you will be infected.

There is no signature or specific contact person identified.

From: Director Bobzien [mailto:BODBobzien@reston.org]
Sent: Friday, September 08, 2017 11:04 AM
Subject: Message From Administrator
your Webmail Account need verification Immediately. Please Verify now to Keep email Account active.   ——–>the shortcut in BLUE actually, goes to hxxp://tyjuanmsta.bplaced.net/bloog/upd/int/sys/12XY. The original message text is actually, red.

Please review the document I uploaded for you HERE its very IMPORTANT.


hxxp://takrebanok.info/tadako/wait.php?stuff=4  <–Actual link path. Not legitimate.

This is a nasty Phish as it is from a compromised Wesleyan account.  The attachment is infected and will put malware on to your system. Do NOT click the attachment.

From: “A valid Wesleyan employee” <executive.server@aol.com>  <–Note you will see a valid Wesleyan employee. Note the address is NOT a Wes address
Date: Monday, August 21, 2017 at 10:45 AM
To: Wes Employee <WesEmployee@wesleyan.edu>
Subject: Request
Are you in the office?
This is an interesting email as it only asks you to reply to an email. The catch its the email is false. You will be socially engineered (guided by the bad guy on the other side) to provide information (possibly financial or credentials or the sort) to the bad guys.
From: Shai, Saray
Sent: Tuesday, August 15, 2017 6:46 AM
To: Szegedy-Maszak, Andrew

Dear xxxxxxxxxx@wesleyan.edu,

You are required to update your account.


Security Service
Wesleyan University

The link above actually, redirected to—> hxxp://brightnessfsllc.com/wp-includes/fonts/wesleyan%20university/wesleyan.htm. This is NOT a valid wesleyan address–>brightnessfsllc.com. Hovering over a link will give you the true path for the web browser to follow (Internet Explorer, Firefox, Chrome, etc). The link path shown can say anything.

Dragon will undergo pre-semester maintenance beginning Friday, August 18 at 9:00 PM and will remain unavailable through Saturday, August 19 at 11:30PM

Files on Dragon will not be available during this window.  Please plan to copy any files you may need in advance of this maintenance if you need to work during this time.

It is possible the work will complete prior to 11:30PM.  Keep an eye on our Facebook and Twitter feeds.

From: Mailbox Admin [mailto:bandkmarsh@xtra.co.nz]  <—NOT a Wesleyan Address
Sent: Monday, August 14, 2017 8:54 AM
Subject: Account jhicks@wesleyan.edu needed update in less than 24Hours!
Dear xxxx@wesleyan.edu
We have added  more secured login features to our customers account, To enable us stop any unsecure login access to your account.
Please go to  account update  to complete  and enable this new secured features in your account  
You have less than 24hours to complete this update or your account will be permanently disabled from our database.
Thanks. Mailbox Admin  <– Not a signature we would ever use. No contact information accompanying this signature
Not a Wesleyan web address for the “account update” link—hxxp://maltaegitim.xxx/wp-content/themes/unilearn/includes/secure/index.php?&email=wesuserxxx@wesleyan.edu
Re: School Service
Wed, 9 Aug 2017 12:03:23 -0500
Thomas Winter <mitcheltomm@gmail.com>
xxxx@wesleyan.edu <xxx@wesleyan.edu>
This is an opportunity to support some few selected students for a
home per time job which does not require any professional skill in
doing this job. It is very important to be consistent on the internet
to qualify for this job.You will be handling some elementary paper
work and payroll administration to our clients within the U.S.A. Your
Obligation is to work for 2 hours a day and also listen attentively to
given instructions to execute your assignment. You will also be taking
care of all applications with regards to new clients that are willing
to register/Incorporate their offshore companies.
We are Cyprus based company that offer incorporation services to our
clients all over the globe and you can read more about us on
www.cn-c.com. We have 12 Agents in United State that are working for  <link goes to
the company,they need materials like envelopes, files and stamps to do a legitimate 
their daily job. they will email you whenever they need materials and  looking site 

also state the type of materials and they quantity they need. It will  but DO NOT
then be your duty to contact the supplier through email to make orders  trust the site.
for the materials and also state the quantity that should be mail to   
the agent address through the post.  
Each agent will only order for materials once a week, we are employing
you just to reduce the workload for us, our supplier and for the
agents within your location.Just like we said, it an online job...
agent will only contact you for materials during the weekdays and we
will provide you with funds to purchase the materials. Salary/wages
payment: $400 every week and will be paid to you via check.
We will always email you guidelines and instructions to follow in
getting your job done perfectly when you  start work.If you still care
to proceed with the job, get back to us with your information as
stated below then we will proceed from there.
1, NAME:
Please make sure the provided information is correct as this is the
same information that your check will be issued to.
We wait to read from you as soon as possible.
Best regards,
Mr Thomas

« Newer Posts - Older Posts »

Log in