The Phish Bowl

Title
Description

Highlighted Threat: “Activities Report Wednesday” Phishing Scam

This is a phishing scam that attempts to spoof an NCCU email address. These email alerts are designed to trick recipients into disclosing their personal details. Please notice that once the sign-in link has been hovered over, it will reveal that the link leads to another site. If you have received this email, please delete it.

Below is an example of an email.

Mail Delivery Sub system email example

Description

Phishing Alert: Send Me Your Available Cell Number

Caution: This email did not come from NCCU. It is a phishing scam designed to trick you into providing your personal information or other things of value.

The following is an example of the fraudulent email:

Phishing Cell Number

Description

Phishing Alert: “Reminder–Office 365 Will Expire Today” Scam

The following is a sample of a recent fraudulent email.

phishing_email_office365

Description

Phishing Alert: Together at Home Scam

The following is a sample of a recent fraudulent email.

Phishing email Together at home

Description

Phishing Alert: Claim Your Refund Now Scam

The new phishing scam presents itself as an email message from “(helpdesk@nccu.edu)”.  The message includes a link to a completely fraudulent website that solicits you to submit personal details to claim your tax refund. Do not respond or click on any link!

The following is a sample of a recent fraudulent email.

Phishing Alert – Claim Your Refund Now Scam

Description

Phishing Alert: "Dean/professor hiding his identity and doctoral thesis" Scam

NCCU IT Security is aware of this email in which recipients are directed to click a link to a YouTube video. This is a confirmed phishing scam. If you received this email, do not respond and delete the email from your inbox.

Below is an example of the recent email.

Dean/Professor Hiding Identity email

Description

Phishing Alert: "Job-Referrals Retail" Scam

Below is an example of the recent email.

Job Referrals Retail Email

Description

Phishing Alert: "Faculty Evaluation" Scam

Below is an example of the recent email.

Faculty Evaluation Document Scam Email

Description

Phishing Alert: "Job Opportunity" Scam

Below is an example of the recent email.

Part Time Job Offer Email

Description

Highlighted Threat: "Email Scam Alert (Gift)"

The purpose of this scam is to impersonate a high-level individual such as a dean, provost, or vice chancellor, demanding a subordinate purchase gift cards quickly on his/her behalf.

Below is an example of the recent email.

Email Scam Alert

Description

Highlighted Threat: Part-time Job - Advertise While Driving

The purpose of this scam is to "hook" you into responding to the email to request additional personal information. The email seems like a simple way to get a part-time job and some extra money, but it is definitely a scam.

Below is an example of the recent email.

Part Time Job Advertise Email

Description

Highlighted Threat: Gift Card Spear Phishing Email and Texting Scam 

Send me your real username email scam

Description

Highlighted Threat: Email Scams

Example 1

Fraudulent Email

Example 2

Fraudulent Email

Description

Highlighted Threat: “Amazon Order Delivery” Scam

From: Item Shipping <orders@eamazondeliveries.com>
Sent: Wednesday, December 16, 2020 8:41 AM
To: NCCU USER < NCCUUSER@NCCU.EDU>
Subject: Receipt for your recent purchase ID: XXXXXX-XXXXXXX

Amazon Fraud Email

Description

Highlighted Threat: Gift Card Scams

Be aware of a recent phishing fraud circulating around campus with the intent of deceiving the recipient to send funds.

Below is an example of an email.

-----------------------------------------------------------------------------------------

From: NCCU Staff <golfclubXXX@gmail.com>
Sent: Tuesday, October 13, 2020 10:24 AM
To: NCCU Staff <NCCU Staff@nccu.edu>
Subject: Re: Urgent

I attached a picture of what it looks like,You can get it at any store
close to you.( Cvs, Target, Safe way,Office
Depot,Pathmark,Staples,Winn Dixie, Walgreen,Best Buy,Drug
Mart,GameStores & others around you)..I need 4 Nordstrom   Gift cards
of 200 $... ,that's 800$ worth of  Nordstrom   Gift Cards...scratch
the code panel at the  back of the card and then take a clear picture
of the card  front and back and send me the pictures here in the
email, Ensure you
keep the cards until i ask you to dispose off,Sorry for the
inconvenience, Will reimburse that back to you.


Thanks.

Note..I need it asap

End of example email.

Description

Highlighted Threat: "Past Due Invoice"

When you receive an email stating that there is an outstanding balance or past due amount that you owe for something, it can be personal or related to your company and seem legitimate. Don't click or open attachments from unknown sources. As a reminder, fraudulent links can install malware on your device.

Below is an example of an email.

Dropbox Scam Email

Description

Highlighted Threat: "Work from Home Scam"

Emails impersonating a government agency or other reputable sources may hit your inbox. Don’t click on emails from unknown sources. As a reminder, fraudulent links can install malware on your device.

Below is an example of an email.

Work from home scam email

Description

Dropbox Settlement Scam

The purpose of this scam is to urge you into clicking on the link to request additional personal information for a fake settlement.

Below is an example of an email.

Dropbox Scam Email

Description

Cash App Phishing Email Scam

Scammers are targeting Cash App users and their $cashtag through email and social media platforms like Instagram, YouTube and Twitter.

Cash App Phishing Email

Description

Campus Information: National Cybersecurity Awareness Month (NSCAM)

The purpose of this scam is to "hook" you into clicking on the link to request additional personal information.

Campus Information Cyber security awareness month

Description

Part-Time Job

The purpose of this scam is to "hook" you into responding to the email to request additional personal information. The email seems like a simple way to get a part-time job and some extra money, but it is definitely a scam.

Part Time Job Scam Email

Description

Faculty Evaluation.docx 

Friday, May 8, 2020

Faculty Evaluation Document Scam Email

Description

Cisco Critical Update Phishing Attack

Monday, April 13, 2020

Cisco Critical Update Phishing Email

Description

Emails with a subject line of “Urgent," Quick Request," or something similar try to engage the recipient into a conversation by asking if they are available.

Scam email

For more information regarding spam and phishing attempts, please visit the IT Security page at the link below: 

https://www.nccu.edu/administration/its/information-technology-security

Description

This “phishing” email has recently been sent out to the campus.  Do not click on the links in the attachment and be sure to refrain from responding to the email.  If you received an email similar to the one below, make sure that you delete it immediately.

_______________________________________________________________

From: Cathy Runnels <liliantarly@gmail.com>
Sent: Tuesday, November 19, 2019 10:21:29 AM
To: Staff, Nccu <potentialvictim@NCCU.EDU>
Subject: ASSISTANCE

Jonathan, Are you busy or less busy right now? I need your help with something urgently.


Best Regards ,
Cathy Runnels

Sent from my iPhone

_______________________________________________________________

From: "Grieser, Angela" <angela.grieser@pittsburghpa.gov>
Date: November 18, 2019 at 9:10:59 AM EST
To: "noreply@accountpayable.net" <noreply@accountpayable.net>
Subject: See Remittance Advice Schedule Today

Dear Sir/Madam,

Please find attached the remittance advice for your recent payment.

PDF  Remittanceadvice0783.pdf

If you have any queries regarding your payment please contact us on 01603 459702

Regards,
Payments Team, Norfolk County Council

_______________________________________________________________

If you have clicked on any links or provided any account information in response, please immediately change your password and call the Eagle Technical Assistance Center (ETAC) at 919-530-7676 so that we can help secure your information.

For more information regarding spam and phishing attempts, please visit the IT Security page at the link below: 

https://www.nccu.edu/administration/its/information-technology-security

Description

This “phishing” email has recently been sent out to the campus.  Do not click on the links in the attachment and be sure to refrain from responding to the email.  If you received an email similar to the one below, make sure that you delete it immediately.

Phishing Email

If you have clicked on any links or provided any account information in response, please immediately change your password and call the Eagle Technical Assistance Center (ETAC) at 919-530-7676 so that we can help secure your information.

For more information regarding spam and phishing attempts, please visit the IT Security page at the link below: 

https://www.nccu.edu/administration/its/information-technology-security

Description

From: Caroline Coxe [mailto:gasservicesinc@gmail.com
Sent: Monday, December 10, 2018 10:10 AM
To: Ames, Terrie L <tames1@NCCU.EDU>
Subject: Terrie 

Hi,

I have a new Bank Account and i will like to change my Paycheck Direct Deposit details. Can the change please be effective for the current pay cycle?.

Regards.

John Doe

Note: All direct deposit changes are processed in person with appropriate identification! Never provide your personal information via email, web, text, or phone.