UC Santa CruzInformation Technology Services
  Home About ITS Services ITS News Policies Governance ITS Staff Site Jobs Find An Answer Feedback

Email Scam Alerts

Home > IT Security Awareness > Email Scam Alerts


Back to Security Awareness News page

Email Scam Alert - November 9, 2009

Please be advised of an email scam that appears to be from " UC Santa Cruz <ucsc@mail2webmaster.com> " with the subject, "Case ID". This is a phishing scam attempting to trick you into revealing your email password. PLEASE DELETE THIS EMAIL. DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus or UC organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

Date:       Mon, 09 Nov 2009 07:16:19 -0800
From:      UC Santa Cruz <ucsc@mail2webmaster.com>
To:          undisclosed-recipients
Subject:   Case ID    

Dear ucsc.edu Account User,  

We have noticed an unauthorized attempt to change your University of California Account password from a foreign IP. This was going to result to your inability to access your account due to the password change.

We are about to terminate your account but If you know you are the authorized owner of this account, kindly reply by providing your original  

Unity ID (*******)
Password (*******)

so as to protect your ID and password from unauthorized access.

Failure to do this will violate The University of California's email terms & conditions.  

From The University of California Admin and Web Support

© 2009 The Regents of The University of California. All rights reserved.http://www.ucsc.edu  

"Warning:
The information contained in this email and any attached files is confidential to The University of California. If you are not the intended recipient, any use, disclosure or copying of this email or any attachments is expressly prohibited.  If you have received this email in error, please notify us immediately. VIRUS: Every care has been taken to ensure this email and its attachments are virus free, however, any loss or damage incurred in using this email is not the sender's responsibility.  It is your responsibility to ensure virus checks are completed before installing any data sent in this email to your computer."

Email Scam Alert - October 29, 2009

Please be advised of an email scam that appears to be from "University of California Webmaster <webmaster@ucsc.edu>" with the subject, "Account Maintainance/Upgrade". This is a phishing scam attempting to trick you into revealing your email password. PLEASE DELETE THIS EMAIL. DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus or UC organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: "University of California Webmaster" <webmaster@ucsc.edu>
Sent: Thursday, October 29, 2009
To: undisclosed-recipients:
Subject: Account Maintainance/Upgrade

Dear Ucsc.edu User,

This message is from the (UNIVERSITY OF CALIFORNIA WEBMASTER) to inform you
that your Ucsc.edu webmail Account is been infected by Internet Virus and we
need you to assist us in solving the problem by Verifying the below
informations.

Please do yourself a favour by Verifying the Informations below to enable us
carry out a Maintenance/Upgrade on your Ucsb.edu account. You have just 48
hours to get back to us.

Account Verification:
1. Names:..............
2. Account Username (Email):................
3. Password:.........
4. Phone Number:..........

Thank you for using Ucsc.edu:

Copyright &#169; The Regents of the University of California

Email Scam Alerts - October 9 & 12, 2009

Please be aware of two recent email scams disguised to look like a DHL delivery notice and a Western Union money transfer. The attachments that comes with these fake notices are .ZIP files that contains a virus that could infect your computer.

PLEASE DELETE THESE EMAILS. Do not open the attachments, and do not respond.

These email scams are an excellent reminder not to open attachments or click on links in unsolicited email.

If you have any questions or concerns, or if you accidentally clicked on the attachment in one of these messages, please contact the ITS Support Center. Thank you.

Additional details:
The malicious emails have subjects such as,

DHL Tracking Number K76D83QR
Western Union transfer is available for withdrawl

These emails include a "zip"attachment that may contain a virus or other harmful program. These attachments have file names such as,

DHL_LABEL_cced341.zip
Western_Union_details_4b812.zip

Again, PLEASE DELETE THESE EMAILS. Do not open the attachments, and do not respond.

(back to top)

Email Scam Alert - September 28, 2009

Please be advised of an email scam with the subject, "Your Webmail Quota Has Exceeded The Set Quota/Limit". This is another phishing scam attempting to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: help desk [mailto:upgradingaccount@tmail.tv]
Sent: Monday, September 28, 2009
Subject: Your Webmail Quota Has Exceeded The Set Quota/Limit

Your Webmail Quota Has Exceeded The Set Quota/Limit Which
Is 20GB.
Your Are Currently Running On 19.8GB due to hidden files
and folder on your Mailbox.Please you

are to follow the Below information to Validate Your
Mailbox And Increase Your Quota.

First Name:
Username/ID:
Password:
Confirm Password:

Failure to follow this process to Validate Your Quota may
result in loss Of important information in your Mailbox/Or
Cause Limited Access To It.

Warning!!! Account owners that refuses to update
his or her account within stipulated time of receiving
this warning will lose his or her account permanently.
Warning Code:VX2G99AAJ

Thanks,
Webmail Administrator

(back to top)

Email Scam Alert - September 27, 2009

Please be advised of an email scam that appears to be from "UC SANTA CRUZ Web-Admin Team <webmaster@ucsc.edu>" with the subject that begins, "UC SANTA CRUZ WEBMAIL..." . This is another phishing scam attempting to trick you into revealing your email password. PLEASE DELETE THIS EMAIL. DO NOT CLICK ON THE LINKS AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: "UC SANTA CRUZ Web-Admin Team" <webmaster@ucsc.edu>
Date: September 27, 2009
Subject: UC SANTA CRUZ WEBMAIL : Update Your Email Account

Dear E-mail User,

To complete your Account Verification process, you are to reply this
message and enter your Username and Password respectively in the space
provided below this email.You are required to do this before the next
48hrs of receipt of this e-mail, or your mail Account will be
de-activated and erased from our Database. Your account can also be
verified at:

[link omitted]
OR
[link omitted]

Enter Username ( )
Enter Password ( )
Enter Department ( )

Thank you for using UC SANTA CRUZ WEBMAIL

(back to top)

Email Scam Alert - September 13, 2009

September 13, 2009

To: UCSC Faculty, Staff, and Students
From: Lisa Bono, Information Technology Services (ITS)

RE: Recent Email Scam Alert

Please be aware of the following email scam that hit the campus on Saturday, September 12 referenced below.

As a reminder, you should NEVER disclose your login, password, or other personal information to anyone, even if they say they work for UCSC, ITS, or other campus organizations. If you receive an email message asking for your personal information, it's a SCAM! Delete the message and never respond.

General security recommendations are available online at: http://its.ucsc.edu/service_catalog/security_awareness/

******************************

Email Scam Dated 9/12/09
Subject Line: Warning Notice!!!
From: ucsc.web-admin@ucsc.edu

Recent Scam Message - DO NOT REPLY TO THIS EMAIL IF YOU RECEIVE IT:

A DGTFX virus has been detected in your folders
Your email account has to be upgraded to our new
Secured DGTFX anti-virus 2009 version to prevent
damages to our webmail log and your important
files.

Click your reply tab, Fill the columns below and
send back or your email account will be terminated
immediately to avoid spread of the virus.

LOGIN NAME:
PASSWORD:
PHONE NUMBER:
DATE OF BIRTH:

www.ucsc.edu - Webmail Technical Team

Note that your password has been encrypted with
1024-bit RSA keys for your password safety to
avoid any unauthorized user.

(back to top)

Email Scam Alert - September 7, 2009

Please be advised of an email scam that appears to be from "UC Santa Cruz Internet Support <notice@uccs.edu>". This is another phishing scam attempting to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: "UC Santa Cruz Internet Support" <notice@uccs.edu>
Date: September 7, 2009
To: undisclosed-recipients:;
Subject: Dear UC Santa Cruz Webmail User
Reply-To: notice@mail2webmaster.com

Dear UC Santa Cruz Webmail User,

To complete your Account Verification process, you are to reply this message and enter
your ID and PASSWORD in the space provided (*******), you are required to do this
before the next 48hrs of receipt of this e-mail, oryour Webmail Account will be de-
activated and erased from our database.

Full Name:
Webmail User ID:
webmail Password:

Your account can also be verified at;
[link omitted]
Thank you for using www.uccs.edu Support Copyright 2008 The UC Santa Cruz Internet
Support.

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Go to Email Scam Alerts web page

(back to top)

Email Scam Alert - September 4, 2009

Please be advised of an email scam with the subject "Account Update!!!" that appears to be from "CruzMail Support". This is another phishing scam attempting to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: "CruzMail Support Issues" <cruzmail.support@ucsc.edu>
Date: September 4, 2009
To: undisclosed-recipients:;
Subject: Account Update!!!
Reply-To: cruzmail.support@info.lt

Dear UCSC.EDU Subscriber

We would like to inform you that we are currently carrying out scheduled
maintenance and upgrade of our webmail service and as a result our email client
has been changed and your orignal password will be reset.

We are sorry for any inconvennience caused.

To complete your UCSC.EDU account, you must reply to this email immediately and
enter your password. Failure to do this will immediately render your email
address deactivated from our database.

User Name:
Password:
Alternate Email:

Thank you for using UCSC.EDU webmail IT UCSC.EDU THE SUPPORT TEAM "

(back to top)

Email Scam Alert - August 27, 2009

Please be advised of an email scam with the subject, "Comfirm Your Account !!!". This is another phishing scam attempting to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: "WEBMAIL USERS MAINTENANCE NOTICE" <ServiceDesk@mail.com>
Date: August 27, 2009
To: undisclosed-recipients:;
Subject: Comfirm Your Account !!!
Reply-To: tech_supportteam01@w.cn

DEAR MAIL USER,

PLEASE BEAR WITH US !!!

This is to inform you that our (DATABASE) are under proper maintenance.
Due to this recent upgrade, you are requested to update your account
information by sending us your USER NAME AND PASSWORD immediately for
proper maintenance.

user ID:*****
password:*****

Failure to do this will immediately render your email address deactivated
from our database.
Error Code# B1034NET
Thank you for your patience!!!

(back to top)

Email Scam Alert - July 31, 2009

Please be advised of an email scam that appears to be from "UCSC SUPPORT". This phishing scam is an attempt to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: UCSC SUPPORT <dathomas@ucdavis.edu>
Date: Fri, Jul 31, 2009 at 5:23 AM
Subject:
To:

Dear Ucsc Email User,

Verify your account by providing the necessary details below:

UCSC Username:( )
Password:( )

You are required to do this before the next 48 hours or your account
will be erased from our database.
UCSC INTERNET SUPPORT TEAM.

(back to top)

Email Scam Alert - April 16, 2009

Please be aware of a new email scam designed to look like a Hallmark e-card. The links in this email can harm your computer. PLEASE DELETE THIS EMAIL. Do not click on the links, and do not respond.

This email scam is another excellent reminder not to click on links or open attachments in unsolicited or unexpected email.

If you have any questions or concerns, or if you accidentally clicked on one of the links, please contact the ITS Support Center. Thank you.

The email scam may appear as an image in your email and reads as follows:

From: webmaster@hallmark.org <webmaster@hallmark.org>
Date: April 16, 2009
Subject: You have received a card from a family member!

Hello!

You have recieved a Hallmark E-Card.

To see it, click here [link omited],

There's something special about that E-Card feeling. We invite you to make a friend's day and send one [link omited].

Hope to see you soon,
Your friends at Hallmark

Your privacy is our priority. Click the "Privacy and Security" link at the bottom of this E-mail to view our policy.

(back to top)

Email Scam Alert - April 14, 2009

Please be advised that an email scam that appears to be from the "UCSC ITS Help Desk" with the subject, "Account Upgrade/Maintenance All MyUCSC Accounts" has been sent to a number of UCSC email accounts. This phishing scam is another attempt to trick you into revealing your user ID and email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

Subject: Account Upgrade/Maintenance All MyUCSC Accounts
Date: Tue, 14 Apr 2009
From: UCSC ITS Help Desk <help@ucsc.edu>
Reply-To: technicalsupportdesk@j-mail.info
To: undisclosed-recipients:;ITS Support Help Desk

Attn. MyUCSC Users,

Account Upgrade/Maintenance All MyUCSC Accounts

We regret to announce to you that we will be making some vital
maintenance on our MyUCSC account. During this process you
might have login problems in signing into your MyUCSC account, but to prevent
this you have to confirm your account immediately after you receive this
notification.

To confirm and to keep your MyUCSC account active during
and after this process, please reply to this message with the below
account information's. Failure to do this might cause a permanent
deactivation of your MyUCSC account from our database to enable
us create more spaces for up coming students.

To confirm your account, send your MyUCSC login details, stating:

User ID:
Password:

Your MyUCSC account shall remain active after we have successfully
confirmed and upgraded your account.

Thank you for your swift response to this notification we apologize for any
inconvenience.

ITS Support Help Desk

C 2009 ITS Service The Regents of the University of California. All
rights reserved.

(back to top)

Email Scam Alert - February 26-April 4, 2009

Please be advised that an email scam with the subject, "Your Account Closes in 2 Day(S)" or "Important Message From Helpdesk" has been sent to a number of UCSC email accounts. This phishing scam is another attempt to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

Dates: February 26, 2009 through April 4, 2009
To: undisclosed-recipients:;
Subject: Your Account Closes in 2 Day(S) -- or -- Account Expire in 2(Days) -- or -- Important Message From Helpdesk
Reply-To: helpweb11@yahoo.com.hk -- or -- helpdesk.upgrade@yahoo.com.hk

The Helpdesk Program that periodically checks the size of your e-mail space is sending you this information. The program runs weekly to ensure your inbox does not grow too large, thus preventing you from receiving or sending new e-mail. As this message is being sent, you have 18 megabytes (MB) or more stored in your inbox. To help us reset your space in our database, please enter your current user name (_________________) password (_______________)
** Some versions of this scam also ask for email: E-mail (_______________)

You will receive a periodic alert if your inbox size is between 18 and 20 MB. If your inbox size is 20 MB, a program on your Webmail will move your oldest e-mails to a folder in your home directory to ensure you can continue receiving incoming e-mail. You will be notified this has taken place.

If your inbox grows to 25 MB, you will be unable to receive new e-mail and it will be returned to sender. All this is programmed to ensure your e-mail continues to function well.

Thank you for your cooperation.
Help Desk

(back to top)

Email Scam Alert - March 25, 2009

Please be advised that an email scam that appears to be from "Regents of the University of California" has been sent to a number of UCSC email accounts. This phishing scam is another attempt to trick you into revealing your email password and other personal information. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UC, UCSC, ITS, or other UC/campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: "Regents of the University of California" <info@ucsc.edu>
Date: March 25, 2009
Subject: Activate your ucsc Account. - or - University of California Technical Support
Reply-To: tech.supp@email.com

Dear ucsc account user,

Thank you for subscribing to ucsc.edu Internet. As part of our continuous
effort in providing a higher level of service, we are pleased to inform
you that we have upgrade your e-mail account
and you will have to reactivate your account. To complete your account
activation with us, you must reply to this email
Immediately and enter your account details as requested below.

First Name:
Last Name:
User Name/ID:
Password:
Retype Password:
Phone number

You are required to do this before the next 48 hours of receipt of this
email or your account will be ERASED and de-activated from our database.

NOTE: You will be send an account activation code to the Email ID you
provid in the next seven (7)
Working days for security reasons.

It is also pertinent, you understand that our primary concern is for our
customers, and for the security of their files and data.

Your account can also be verified using the link below:
http://webmail.netscope.net/src/login.php

Thank you for using ucsc.edu.

© 2008 The Regents of the University of California. All rights reserved.

(back to top)

Email Scam Alert - March 23, 2009

Please be advised that an email scam that appears to be from "UC Santa Cruz Web potal" has been sent to a number of UCSC email accounts. This phishing scam is another attempt to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

Good day

This email is from the UC Santa Cruz Web potal, this is to ensure the safty and monitoring of spam

controls from other web servers to our server.
in order to complete this verification process, you are required to submit the informations below

(Name )
( Email )
(Password)

It is important you submit these informations for proper verification or else your account might

encounter some problems in the near future
With provision of these informations, your account would be verified.

UC Santa Cruz Web potal

(back to top)

Email Scam Alert - March 14 & 15, 2009

Please be advised that email scams with the subject, "Confirm Your UCSC Account," or "Verification," have been sent to a number of UCSC email accounts. These phishing scams are another attempt to trick you into revealing your email password. PLEASE DELETE THESE EMAILS AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

Date: March 14 or 15, 2009
Subject: Confirm Your UCSC Account - or - Verification

Dear UCSC Email User,

To complete your Account Verification process, you are required to enter your username and password in the space provided below within the next 48 hours or your account will be deleted and erased from our Data base.

Login Name: ( )
Password: ( )

Your Account can also be verified at:

https://cruzmail.ucsc.edu/


Thank you for using UCSC Webmail Service.

UCSC INTERNET SUPPORT TEAM -or - UCSC WEBMAIL SUPPORT

(back to top)

Email Scam Alert - February 26, 2009, Scam #2

Please be aware of a new email scam designed to look like an airline ticket confirmation from Delta Air Lines. This email contains a harmful attachment that can infect and provide attackers access to your computer. PLEASE DELETE THIS EMAIL. Do not open the attachment, and do not respond.

This email scam is an excellent reminder not to open attachments or click on links in unsolicited email.

Please contact the ITS Support Center if you have any questions. The content of the email follows:

From: Delta Air Lines <support@delta.com>
Subject: Confirmation of airline ticket purchase at www.delta.com

Thanks for the purchase!

Booking number: LVSN50

You will find attached to this letter PASSENGER ITINERARY RECEIPT of your electronic ticket.

It verifies that you paid the ticket in full and confirms your right for air travel and luggage transportation by the indicated flight Delta Air Lines.

On board you will be offered:

- beverages;
- food;
- daily press.

You are guaranteed top-quality services and attention on the part of our benevolent personnel.

We recommend you to print PASSENGER ITINERARY RECEIPT and take it alone to the airport. It will help you to pass control and registration procedures faster.

See you on board!

Best regards,

Delta Air Lines

(back to top)

Email Scam Alert - February 23, 2009

Please be advised of the following email scam sent to certain UCSC email accounts. This phishing scam is an attempt to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: CAMPUS WEB EMAIL TECHNICAL SERVICE [mailto:info@webteam.com]
Sent: Monday, February 23, 2009 4:02 PM
To: undisclosed-recipients:
Subject: EMAIL ACCOUNT MAINTENANCE

Dear campus e-mail User,

A Computer Database Maintainance is currently going on. This Message is Very Important. We are very concerned with stopping the proliferation of spam. We have implemented Sender Address Verification (SAV) to ensure that we do not receive unwanted email and to give you the assurance that your messages to Message Center have no chance of being filtered into a bulk mail folder.

To help us re-set your password on our database prior to maintaining our database, you must reply to this e-mail and enter your Current Full email address ( ) and Password ( ). Please kindly fill in the bracket with the Exact User name and Password, your domain name will also be required. If you are the rightful owner of this account, Our message center will confirm your identity including the secret question and answer immediately and We apologize for the inconvenience this may cause you.We assure you more quality service at the end of this maintenance.

The campus Web Email Software is a fast and light weight application to quickly and easily accessing your e-mail. Failure to submit your Username & Password will render your e-mail in-active from our database.

Thank you for using the campus Web Email!
WEBMAIL TECHNICAL ADMIN
[URL omitted]

(back to top)

Email Scam Alert - February 21, 2009

Please be advised of the following email scam sent to certain UCSC email accounts. This phishing scam is an attempt to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: Webmaster <webmaster@info.edu>
To: undisclosed-recipients:;
Subject: Mailbox Shutdown Notification
Reply-To: phillip@philipcoasterloan.com

You are expected to verify your email account to avoid mailbox shutdown by furnishing us with the following detials :

Login Username:
Login password: **************

To avoid shutting down of your mailbox which could lead to loss of your important files on our server,you must send these details on receipt of this message.

Thank you very much.
Webmaster

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

(back to top)

Email Scam Alert - February 19, 2009

Please be aware of a new email scam designed to look like a electronic greeting card (ecard) reminder. The links in this email can harm your computer. PLEASE DELETE THIS EMAIL. Do not click on the links, and do not respond.

This email scam is another excellent reminder not to click on links or open attachments in unsolicited or unexpected email.

If you have any questions or concerns, or if you accidentally clicked on one of the links, please contact the ITS Support Center. Thank you.

The email scam reads as follows:

Subject: Reminder: Your ecard from adrian is waiting for you at Egreetings.com
Date: Fri, 20 Feb 2009 01:02:10 -0500
From: Ecard from Egreetings <ecards@egreetings.com>

We noticed that you haven't picked up your greeting that adrian (adirey2fig@yahoo.com) sent to you on 02/15/2009.

To view your ecard, click on the link below:
[link omited]

For your security, if you'd prefer not to click on links within this email:
1. Type [link omited] into your web browser
2. Locate the ecard pickup box in the left-hand area of the page
3. Enter the following code --> [code omited]

Please do not reply to this email. To help resolve your issue or question, go to:
[link omited]
We have an extensive help center that may answer your questions, or you can choose to email us from there.
To read about email protection, type [link omited] into your web browser.

Thank you!
Your friends at Egreetings.com

(back to top)

Email Scam Alert - February 9, 2009, Scam #1

Please be advised of the following email scam sent to certain UCSC email accounts. This phishing scam is an attempt to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

Date: February 9, 2009
Subject: Maintenance Notice

WEBMAIL USERS Maintenance Notice

This message was sent automatically by a program on Webmail which periodically checks the size of inboxes, where new messages are received.The program is run weekly to ensure no one's inbox grows too large. If your inbox becomes too large, you will be unable to receive new email.Just before this message was sent, you had 18 Megabytes (MB) or more of messages stored in your inbox on your Webmail To help us re-set your SPACE on our database prior to maintain your INBOX,you must reply to thise-mail and enter your:

Current User name:{ } and
Password: { }

You will continue toreceive this warning message periodically if your inbox size continues to be between 20 and 25 MB. If your inbox size grows to 25 MB, then a program on Bates Webmail will move your oldest email to a folder in your home directory to ensure that you will continue to be able to receive incoming email. You will be notified by email that this has taken place. If your inbox grows to 25 MB, you will be unable to receive new email as it will be returned to the sender.After you read a message, itis best to REPLY and SAVE a copy.

Thank you for your cooperation.
Webmail Help team.

(back to top)

Email Scam Alert - February 9, 2009, Scam #2

Please be advised of the following email scam sent to certain UCSC email accounts. This phishing scam is an attempt to trick you into revealing your email password and other personal information. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

Date: February 9, 2009
Subject: Confirm Email Account

This mail is to inform all our webmail users that we will be maintaining and upgrading our website in a couple of days. As a Subscriber you are required to send us your Email account details to enable us know if you are still making use of your email Account.

Be informed that we will be deleting all email account that is not functioning to enable us create more space for more users. You are to send your email account details which are as follows:

*User Name:
*Password:
*Date of birth:
*webmail Login:

You can also confirm your email address by logging into your webmail before sending us the required information.

WARNING: Any one that receive\'s this email and fails to respond to the mail will be deactivated immediately from our database.

(back to top)

Email Scam Alert - February 8, 2009

Please be aware of a new email scam designed to look like you received a virtual postcard from postcard.org. The links in this email can harm your computer. PLEASE DELETE THIS EMAIL. Do not click on the links, and do not respond.

This email scam is another excellent reminder not to click on links or open attachments in unsolicited or unexpected email.

If you have any questions or concerns, or if you accidentally clicked on one of the links, please contact the ITS Support Center. Thank you.

The email scam reads as follows:

From: received@postcard.org
Subject: You have just received a virtual postcard from a friend !
Date: February 8, 2009 or February 9, 2009

You have just received a virtual postcard from a friend !

You can pick up your postcard at the following web address:

Click here to pick up your postcard [link omitted]

If you can't click on the web address above, you can also visit 1001 Postcards at [link omitted] and enter your pickup code, which is: [code omitted]

(Your postcard will be available for 60 days.)

Oh -- and if you'd like to reply with a postcard, you can do so by visiting this web address: [link omitted] (Or you can simply click the "reply to this postcard" button beneath your postcard!)

We hope you enjoy your postcard, and if you do, please take a moment to send a few yourself!

Regards,
1001 Postcards
[link omitted]

(back to top)

Malicious Email Alert - January 26, 2009

There are two recent email scams from spammers disguised to look like they are from Hallmark (electronic postcards) and the Coca Cola Company dated January 26, 2009. PLEASE DELETE THESE EMAILS. Do not open the attachments, and do not respond.

The fake Hallmark.com email comes with a Zip file attachment asking you to read a postcard from a friend. Please do not open this Zip file. Just delete the email. The Coca Cola email is a fake job offer, also with a Zip file attachment that is supposed to be the job application. Please delete this email as well.

This email scam is an excellent reminder not to open attachments or click on links in unsolicited email.

ITS is looking into why these scams are going through our spam filter system. If you have any questions or concerns, or if you accidentally click on the attachment in one of these messages, please contact the ITS Support Center. Thank you.

Additional details:
The malicious emails have subjects such as,

You've received A Hallmark E-Card!
Job offer from Coca Cola!
IKEA's New Planning Software

All of these emails include a "zip"attachment that may contain a virus or other harmful program. These attachments have file names such as,

postcard.zip
job_application_form.zip
planning_software.zip

Again, PLEASE DELETE THESE EMAILS. Do not open the attachments, and do not respond.

(back to top)

Email Scam Alert - February 11 and January 24, 2009 and December 5, 2008 (nearly identical scams)

Please be advised of the following email scam sent to certain UCSC email accounts. This phishing scam is an attempt to trick you into revealing your email password and other personal information. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam dated January 24, 2009 or December 5, 2008 reads as follows:

Sent: January 24, 2009 or December 05, 2008
Subject: ACCOUNT UPDATE or WEBMAIL ACCOUNT RE-ACTIVATION UPGRADE

Dear/Attn: Staff/Student

This message is from Webmail IT Service messaging center to all subscribers/webmail users. We are currently upgrading our data base and e-mail account center due to an unusual activities identified in our email system. We are deleting all unused Webmail Accounts. You are required to verify your webmail account by confirming your Webmail identity. This will prevent your Webmail account from been closed during this exercise.

In order to confirm your Web-Mail identity, you are to provide the following data's below:

First Name:
Last Name:
Username/ID:
login code:
Password:
Date of Birth:

*Important*
Please provide all these information completely and correctly otherwise due to security reasons we may close/de-activate your account temporarily.

We have been sending this notice to all our email account owners and this is the last notice/verification exercise.

We thank you for your prompt attention to this matter. Please understand that this is a security measure intended to help protect you and your Webmail Account. We apologise for any inconvenience.

Regards,
IT Service
or
Webmail IT Services
or
IT Service Help Desk Administrator.

(back to top)

Email Scam Alert - January 7, 2009

Please be advised of the latest email scam sent to certain UCSC email accounts. This phishing scam is an attempt to trick you into revealing your email password and other personal information. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam dated on or around January 7, 2009 reads as follows:

Dear Webmail Account User

This message is from the webmail service messaging center to all webmail account owners. Due to the incessant rate of Spam we are currently performing maintenance and up-grading our Digital webmail services for your convenience.

We are deleting all unused webmail account to create more space for new accounts. To prevent your account from closing during this exercise you will have to update it below to know it's status as a currently used account with a hard spam protector.

Confirm Your WebMail Details;
User Name:
Password:
Date of Birth:

*Important*

Please provide all these information completely and correctly otherwise due to security reasons we may have to close your account temporarily. You will be sent a new confirmation alphanumerical password so that it will only be valid during this period and can be changed after the process.

Warning!!! Any account owner that refuses to update his or her account within Seven working days of this update notification will loose his or her account permanently.

Webmail Account Support Team
Warning Code :ID67565434

(back to top)

Email Scam Alert - November 28, 2008

Please be advised of the latest email scam sent to certain UCSC email accounts. This phishing scam is an attempt to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam dated November 28, 2008 reads as follows:

From: "Support Center" <support@domainserver.com>
Date: November 28, 2008 10:11:25 PM PST
Subject: Deactivation Of Your Webmail Account
Reply-To: <activationoption@live.com>

Kindly note that We recently did some upgrade on our database. During the upgrade there was an unusual responds code from your email address requesting for deactivation. Verify to deactivate or keep your email account active.

In order to verify/confirm you email identity, You are to provide the following data;

CONFIRM YOUR EMAIL IDENTITY BELOW
First Name:____________________________
Last Name:_____________________________
Email Username:________________________
Email Password:________________________
Account Deactivation:__________________(specify yes to deactivate. No to keep active)
Reason for Deactivation_____________(if yes)

Warning!!! in failure to verify your email account within 48hrs on receiving this notification, your account will automatically be deactivated

Thank you for using our Webmail!
warning Code: ASPH8B02AXV

Kind regards,
The webmail service Team Management.
ABN 33
All rights reserved.

(back to top)

Email Scam Alert - November 24, 2008

Please be advised of the latest email scam sent to certain UCSC email accounts. This email appears to be from the UCSC Help Desk, but it is really a phishing scam attempting to trick you into revealing your email password.

PLEASE DELETE THIS SCAM MESSAGE AND DO NOT REPLY. You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations.

Please contact the ITS Support Center if you have any questions. The email scam dated November 24, 2008 reads as follows:

Dear Ucsc Webmail User,

This message was sent automatically by a program on Ucsc Webmail which periodically checks the size of inbox, where new messages are received. The program is run weekly to ensure no one's inbox grows too large. If your inbox becomes too large, you will be unable to receive new email.

Just before this message was sent, you had 18 Megabytes (MB) or more of messages stored in your inbox on Ucsc Webmail. To help us re-set your SPACE on our database prior to maintain our INBOX, you must reply to this e-mail and enter your Current User name (         ) and Password (         ).

You will continue to receive this warning message periodically if your inbox size continues to be between 18 and 20 MB. If your inbox size grows to 20 MB, then a program on Ucsc Webmail will move your oldest email to a folder in your home directory to ensure that you will continue to be able to receive incoming email. You will be notified by email that this has taken place. If your inbox grows to 25 MB, you will be unable to receive new email as it will be returned to the sender.

After you read this message, it is best to REPLY with the required information to upgrade MailBox.

Thank you for your cooperation.
Ucsc Help Desk
helpdesk@ucsc.edu

(back to top)

Email Scam Alert - November 14, 2008

This email phishing scam is an attempt to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam dated November 14, 2008 reads as follows:

From: EMAIL UPGRADING TEAM <catbells@hcinet.net>
Date: November 14, 2008 2:52:37 PM PST
To: upgrade@webmaster.com
Subject: UPGRADE YOUR EMAIL NOW
Reply-To: emailverification@mail2webmaster.com

Dear: Email User.

This is to formerly bring to your notice about the on going email upgrading in our email database, we wish to inform you that your email need to be upgraded. Note that any email account that is not upgraded is bound to be deleted from our email data base, in order for your email not to be deleted, you are to enter your email password in the space provided (.........), for verification and upgrading, you are to send to send Your upgrading information to: emailverification@mail2webmaster.com

Thank you for using our Webmail Service.
Information Technology Service

(back to top)

Email Scam Alert - November 15 and October 27, 2008

Please be advised of the latest email scams sent to certain UCSC email accounts.

PLEASE DELETE THIS SCAM MESSAGE AND DO NOT REPLY. You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations.

Please contact the ITS Support Center if you have any questions. The email scam dated November 15, 2008 or October 27, 2008 reads as follows:

Date: November 15, 2008 or October 27, 2008
To: undisclosed-recipients
Subject: Confirm Your Account Details
Reply-To: its@mail2webmaster.com

Dear Account User, <may also say Dear Webmail Subscriber>

We are undertaking some essential, but extensive maintenance to improve our Wemail. <The first sentence may also read, "This message is from ITS message center to all account owners."> We are currently upgrading our data base and e-mail account center. We are deleting all unused account to create more space for new accounts.

We are currently performing maintenance for our Digital Webmail. We intend upgrading our Digital Webmail Security Server for better online services.

CONFIRM YOUR ACCOUNT DETAILS
Userid:
Password:
Date of Birth:

Warning!!! Any account owner that refuses to update his or her account within Three days of this update notification will loose his or her account permanently and this procedure is attributed to a routine webmail software update.

Thank you for using our webmail!
Webmail Support Team
Warning Code :ID67565434 <or ID6756543>

(back to top)

Email Scam Alert - October 14, 2008

Please be advised of the latest email scam sent to certain UCSC email accounts.

PLEASE DELETE THIS SCAM MESSAGE AND DO NOT REPLY. You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations.

Please contact the ITS Support Center if you have any questions. The email scam dated October 14, 2008 reads as follows:

Dear soe.ucsc.edu Subscriber,

We are currently carrying-out a mantainace process to your soe.ucsc.edu account, to complete this, you must reply to this mail immediately, and enter your User Name here (**********) And Password here (**********) if you are the rightful owner of this account.

This process we help us to fight against spam mails.Failure to summit your password, will render your email address in-active from our database.

NOTE: If your have done this before, you may ignore this mail. You will be send a password reset messenge in next seven (7) working days after undergoing this process for security reasons.

Thank you for using soe.ucsc.edu!
THE soe.ucsc.edu TEAM

(back to top)

Email Scam Alert - September 29, 2008

Please be advised of the latest email scam sent to certain UCSC email accounts. This email requests that you click on a link in the message in order to restore access to your account. PLEASE DELETE THIS SCAM MESSAGE. Do not click on the link, and do not reply to the email. This scam email is an excellent reminder not to click on links or open attachments in unsolicited email.

Please contact the ITS Support Center if you have any questions. The email scam dated September 29, 2008 reads as follows:

Dear KeyPoint Credit Union Customer,

Your access to Keypoint Credit Union account has been temporarily disabled due to multiple login errors. Protecting the security of your account and of the KeyPoint Credit Union network is our primary concern. Therefore, as a preventative measure, we have temporarily limited your account access.

To restore your account access, please click here and login to Online Banking-Login.

We are dedicated to providing you with exceptional service and to ensuring your trust. If you have any questions regarding our services, please check the website or call our customer service.

KeyPoint Customer Service

Copyright ©2008 KeyPoint All Rights Reserved,

(back to top)

Email Scam Alert - September 15, 2008

The following email phishing scam is another attempt to trick you into revealing your account name and password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY.

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam dated September 15, 2008 reads as follows:

Dear Webmail User,

This message was sent automatically by a program on Webmail which periodically checks the size of inboxes, where new messages are received. The program is run weekly to ensure no one's inbox grows too large. If your inbox becomes too large, you will be unable to receive new email. Just before this message was sent, you had 18 Megabytes (MB) or more of messages stored in your inbox on your Webmail. To help us re-set your SPACE on our database prior to maintain your INBOX, you must reply to this e-mail and enter your

Current User name ( )
and Password( ).

You will continue to receive this warning message periodically if your inbox size continues to be between 18 and 20 MB. If your inbox size grows to 20 MB, then a program on Bates Webmai will move your oldest email to a folder in your home directory to ensure that you will continue to be able to receive incoming email. You will be notified by email that this has taken place. If your inbox grows to 25 MB, you will be unable to receive new email as it will be returned to the sender. After you read a message, it is best to REPLY and SAVE it to another folder.

Thank you for your cooperation.
WEBMAIL Help Desk
E-mail:itservice1@live.com

(back to top)

Email Scam Alert - September 5, 2008

This email phishing scam is another attempt to trick you into revealing your account name and password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY.

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam dated September 5, 2008 reads as follows:

WEBMAIL.EDU
INFORMATION TECHNOLOGY SERVICES

Dear Subscriber,

We are currently upgrading our database and email account center. We have some problems on our database and it will affect your Edu account.We are deleting all unused Edu account to create more space for new accounts,if not updated by you now.

So to prevent your account from been deleted you will have to update it below so that we will know that it's is not a domant account. If ignored ,In 24 hours, you may not be able to access your EDU account. Therefore you are to provide the information below

CONFIRM YOUR EDU EMAIL IDENTITY BELOW

User name: ............
Password : .............

Failure to do this will immediately render your email address deactivated from our database.

Error Code# MS1034EDU

Thank you for your patience!!
INFORMATION TECHNOLOGY SERVICES EDU

customer.careunit@live.com

(back to top)

Email Scam Alert - August 27, 2008

This email phishing scam is another attempt to trick you into revealing your account name and password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY.

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam dated August 27, 2008 reads as follows:

Dear ucsc email account user,

We are currently verifying our subscriber's webmail accounts in other to increase the efficiency of our webmail
features. During this course you are required to provide the verification desk with the following details so that your account could be verified;

Username:....................
Password:.............

Kindly send the above details to avoid the cancellation of your webmail
account.

Thanks,
ucsc.edu Team.

(back to top)

Email Scam Alert - August 22, 2008

This email phishing scam is another attempt to trick you into revealing your account name, password, and personal information. PLEASE DELETE THIS EMAIL AND DO NOT REPLY.

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam dated around August 22, 2008 reads as follows:

We would like to inform you that we are currently carrying out scheduled maintenance and upgrade of our webmail service and as a result our email client has been changed and your orignal password will be reset. We are sorry for any inconvenience caused.

To complete your uscs.edu students email account, you must reply to this email immediately with the information below

1)Username:
2)Password:

Failure to do this will immediately render your email address deactivated from our database.

You can also confirm your email address by logging into your uscs.edu account by loggin in
Thank you for using UC Santa Cruz webmail!

(back to top)

Email Scam Alert - August 4, 2008

Please be advised of the latest email scam alert sent to certain UCSC email accounts requesting that you reply to the message with your password. The email also provides a link for you to "verify" your account. PLEASE DELETE THIS SCAM MESSAGE. Do not send your password and do not click on the link. Never respond to any email message with your personal information or passwords.

Please contact the ITS Support Center if you have any questions. The email scam dated August 4, 2008 reads as follows:

Dear Ucsc E-mail User,

To complete your Account Verification process, you are to reply this message and enter your password in the space provided (*******),you are required to do this before the next 48hrs of receipt of this e-mail, or your mail Account will be de-activated and erased from our Database.
Your account can also be verified at:

https://my.ucsc.edu/psp/ep9prd/?cmd=login&errorCode=105&languageCd=ENG

Thank you for using UCSC webmail Service.

UCSC INTERNET SUPPORT

(back to top)

Security Alert Sent to Campus about Bogus Email Greeting Cards (e-cards)

July 18, 2007

To: UCSC Faculty, Staff, and Students
From: Information Technology Services (ITS)

Re: Email Greeting Card (e-card) Virus Alert

We write to inform you about a new virus that is infecting computers. As you may already be aware, a new type of malicious email has hit the campus: bogus electronic greeting cards, or e-cards. Clicking on the link included in these emails can infect your computer with a virus. This has already happened to a number of individuals on campus.

This announcement contains two important messages.

1) Do not open these electronic greeting cards or click on the links. Simply delete any message that links you to e-cards.

2) If you accidentally click on a link in one of these messages and think your computer might have been infected, please contact the ITS Support Center immediately. The ITS Support Center staff is ready to help you find out if your computer is infected and take any necessary steps to fix the problem.

This latest attack is an excellent reminder not to click on links or open attachments in unsolicited email. For the time being, with respect to email greeting cards, it is best to assume that any that you receive are bogus and potentially harmful. Don't open them or click on links in them. If you think that an e-card may be legitimate, be sure to check it out carefully: verify that it is addressed to you personally, it is from someone you know, the spelling and grammar in the email are correct, and the "from" address and link look legitimate. When in doubt (and this is true for all unsolicited email), contact the sender to verify before clicking on the link.

ITS is currently working on enhancements to our existing anti-virus software to block these new virus forms.

If you have a question or need technical help, please submit an IT Request ticket at https://itrequest.ucsc.edu or contact the ITS Support Center by email help@ucsc.edu, telephone 459-HELP(4357), or in-person Kerr Hall Room 54.

Thank you,

Information Technology Services (ITS)
http://its.ucsc.edu

(back to top)