UC Santa CruzInformation Technology Services
  Home About ITS Services ITS News Policies Governance ITS Staff Site Jobs Find An Answer Feedback

Email Scam Alerts

Home > IT Security Awareness > Email Scam Alerts


Go to Security Awareness home page
Go to Security Awareness News page

Email Scam Alert - November 9, 2009

Please be advised of an email scam that appears to be from " UC Santa Cruz <ucsc@mail2webmaster.com> " with the subject, "Case ID". This is a phishing scam attempting to trick you into revealing your email password. PLEASE DELETE THIS EMAIL. DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus or UC organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

Date:       Mon, 09 Nov 2009 07:16:19 -0800
From:      UC Santa Cruz <ucsc@mail2webmaster.com>
To:          undisclosed-recipients
Subject:   Case ID    

Dear ucsc.edu Account User,  

We have noticed an unauthorized attempt to change your University of California Account password from a foreign IP. This was going to result to your inability to access your account due to the password change.

We are about to terminate your account but If you know you are the authorized owner of this account, kindly reply by providing your original  

Unity ID (*******)
Password (*******)

so as to protect your ID and password from unauthorized access.

Failure to do this will violate The University of California's email terms & conditions.  

From The University of California Admin and Web Support

© 2009 The Regents of The University of California. All rights reserved.http://www.ucsc.edu  

"Warning:
The information contained in this email and any attached files is confidential to The University of California. If you are not the intended recipient, any use, disclosure or copying of this email or any attachments is expressly prohibited.  If you have received this email in error, please notify us immediately. VIRUS: Every care has been taken to ensure this email and its attachments are virus free, however, any loss or damage incurred in using this email is not the sender's responsibility.  It is your responsibility to ensure virus checks are completed before installing any data sent in this email to your computer."

Email Scam Alert - October 29, 2009

Please be advised of an email scam that appears to be from "University of California Webmaster <webmaster@ucsc.edu>" with the subject, "Account Maintainance/Upgrade". This is a phishing scam attempting to trick you into revealing your email password. PLEASE DELETE THIS EMAIL. DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus or UC organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: "University of California Webmaster" <webmaster@ucsc.edu>
Sent: Thursday, October 29, 2009
To: undisclosed-recipients:
Subject: Account Maintainance/Upgrade

Dear Ucsc.edu User,

This message is from the (UNIVERSITY OF CALIFORNIA WEBMASTER) to inform you
that your Ucsc.edu webmail Account is been infected by Internet Virus and we
need you to assist us in solving the problem by Verifying the below
informations.

Please do yourself a favour by Verifying the Informations below to enable us
carry out a Maintenance/Upgrade on your Ucsb.edu account. You have just 48
hours to get back to us.

Account Verification:
1. Names:..............
2. Account Username (Email):................
3. Password:.........
4. Phone Number:..........

Thank you for using Ucsc.edu:

Copyright &#169; The Regents of the University of California

Email Scam Alerts - October 9 & 12, 2009

Please be aware of two recent email scams disguised to look like a DHL delivery notice and a Western Union money transfer. The attachments that comes with these fake notices are .ZIP files that contains a virus that could infect your computer.

PLEASE DELETE THESE EMAILS. Do not open the attachments, and do not respond.

These email scams are an excellent reminder not to open attachments or click on links in unsolicited email.

If you have any questions or concerns, or if you accidentally clicked on the attachment in one of these messages, please contact the ITS Support Center. Thank you.

Additional details:
The malicious emails have subjects such as,

DHL Tracking Number K76D83QR
Western Union transfer is available for withdrawl

These emails include a "zip"attachment that may contain a virus or other harmful program. These attachments have file names such as,

DHL_LABEL_cced341.zip
Western_Union_details_4b812.zip

Again, PLEASE DELETE THESE EMAILS. Do not open the attachments, and do not respond.

(back to top)

Email Scam Alert - September 28, 2009

Please be advised of an email scam with the subject, "Your Webmail Quota Has Exceeded The Set Quota/Limit". This is another phishing scam attempting to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: help desk [mailto:upgradingaccount@tmail.tv]
Sent: Monday, September 28, 2009
Subject: Your Webmail Quota Has Exceeded The Set Quota/Limit

Your Webmail Quota Has Exceeded The Set Quota/Limit Which
Is 20GB.
Your Are Currently Running On 19.8GB due to hidden files
and folder on your Mailbox.Please you

are to follow the Below information to Validate Your
Mailbox And Increase Your Quota.

First Name:
Username/ID:
Password:
Confirm Password:

Failure to follow this process to Validate Your Quota may
result in loss Of important information in your Mailbox/Or
Cause Limited Access To It.

Warning!!! Account owners that refuses to update
his or her account within stipulated time of receiving
this warning will lose his or her account permanently.
Warning Code:VX2G99AAJ

Thanks,
Webmail Administrator

Email Scam Alert - September 27, 2009

Please be advised of an email scam that appears to be from "UC SANTA CRUZ Web-Admin Team <webmaster@ucsc.edu>" with the subject that begins, "UC SANTA CRUZ WEBMAIL..." . This is another phishing scam attempting to trick you into revealing your email password. PLEASE DELETE THIS EMAIL. DO NOT CLICK ON THE LINKS AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: "UC SANTA CRUZ Web-Admin Team" <webmaster@ucsc.edu>
Date: September 27, 2009
Subject: UC SANTA CRUZ WEBMAIL : Update Your Email Account

Dear E-mail User,

To complete your Account Verification process, you are to reply this
message and enter your Username and Password respectively in the space
provided below this email.You are required to do this before the next
48hrs of receipt of this e-mail, or your mail Account will be
de-activated and erased from our Database. Your account can also be
verified at:

[link omitted]
OR
[link omitted]

Enter Username ( )
Enter Password ( )
Enter Department ( )

Thank you for using UC SANTA CRUZ WEBMAIL

Email Scam Alert - September 13, 2009

September 13, 2009

To: UCSC Faculty, Staff, and Students
From: Lisa Bono, Information Technology Services (ITS)

RE: Recent Email Scam Alert

Please be aware of the following email scam that hit the campus on Saturday, September 12 referenced below.

As a reminder, you should NEVER disclose your login, password, or other personal information to anyone, even if they say they work for UCSC, ITS, or other campus organizations. If you receive an email message asking for your personal information, it's a SCAM! Delete the message and never respond.

General security recommendations are available online at: http://its.ucsc.edu/service_catalog/security_awareness/

******************************

Email Scam Dated 9/12/09
Subject Line: Warning Notice!!!
From: ucsc.web-admin@ucsc.edu

Recent Scam Message - DO NOT REPLY TO THIS EMAIL IF YOU RECEIVE IT:

A DGTFX virus has been detected in your folders
Your email account has to be upgraded to our new
Secured DGTFX anti-virus 2009 version to prevent
damages to our webmail log and your important
files.

Click your reply tab, Fill the columns below and
send back or your email account will be terminated
immediately to avoid spread of the virus.

LOGIN NAME:
PASSWORD:
PHONE NUMBER:
DATE OF BIRTH:

www.ucsc.edu - Webmail Technical Team

Note that your password has been encrypted with
1024-bit RSA keys for your password safety to
avoid any unauthorized user.

Email Scam Alert - September 7, 2009

Please be advised of an email scam that appears to be from "UC Santa Cruz Internet Support <notice@uccs.edu>". This is another phishing scam attempting to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: "UC Santa Cruz Internet Support" <notice@uccs.edu>
Date: September 7, 2009
To: undisclosed-recipients:;
Subject: Dear UC Santa Cruz Webmail User
Reply-To: notice@mail2webmaster.com

Dear UC Santa Cruz Webmail User,

To complete your Account Verification process, you are to reply this message and enter
your ID and PASSWORD in the space provided (*******), you are required to do this
before the next 48hrs of receipt of this e-mail, oryour Webmail Account will be de-
activated and erased from our database.

Full Name:
Webmail User ID:
webmail Password:

Your account can also be verified at;
[link omitted]
Thank you for using www.uccs.edu Support Copyright 2008 The UC Santa Cruz Internet
Support.

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Email Scam Alert - September 4, 2009

Please be advised of an email scam with the subject "Account Update!!!" that appears to be from "CruzMail Support". This is another phishing scam attempting to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: "CruzMail Support Issues" <cruzmail.support@ucsc.edu>
Date: September 4, 2009
To: undisclosed-recipients:;
Subject: Account Update!!!
Reply-To: cruzmail.support@info.lt

Dear UCSC.EDU Subscriber

We would like to inform you that we are currently carrying out scheduled
maintenance and upgrade of our webmail service and as a result our email client
has been changed and your orignal password will be reset.

We are sorry for any inconvennience caused.

To complete your UCSC.EDU account, you must reply to this email immediately and
enter your password. Failure to do this will immediately render your email
address deactivated from our database.

User Name:
Password:
Alternate Email:

Thank you for using UCSC.EDU webmail IT UCSC.EDU THE SUPPORT TEAM "

Email Scam Alert - August 27, 2009

Please be advised of an email scam with the subject, "Comfirm Your Account !!!". This is another phishing scam attempting to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: "WEBMAIL USERS MAINTENANCE NOTICE" <ServiceDesk@mail.com>
Date: August 27, 2009
To: undisclosed-recipients:;
Subject: Comfirm Your Account !!!
Reply-To: tech_supportteam01@w.cn

DEAR MAIL USER,

PLEASE BEAR WITH US !!!

This is to inform you that our (DATABASE) are under proper maintenance.
Due to this recent upgrade, you are requested to update your account
information by sending us your USER NAME AND PASSWORD immediately for
proper maintenance.

user ID:*****
password:*****

Failure to do this will immediately render your email address deactivated
from our database.
Error Code# B1034NET
Thank you for your patience!!!

Email Scam Alert - July 31, 2009

Please be advised of an email scam that appears to be from "UCSC SUPPORT". This phishing scam is an attempt to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

From: UCSC SUPPORT <dathomas@ucdavis.edu>
Date: Fri, Jul 31, 2009 at 5:23 AM
Subject:
To:

Dear Ucsc Email User,

Verify your account by providing the necessary details below:

UCSC Username:( )
Password:( )

You are required to do this before the next 48 hours or your account
will be erased from our database.
UCSC INTERNET SUPPORT TEAM.

Email Scam Alert - April 16, 2009

Please be aware of a new email scam designed to look like a Hallmark e-card. The links in this email can harm your computer. PLEASE DELETE THIS EMAIL. Do not click on the links, and do not respond.

This email scam is another excellent reminder not to click on links or open attachments in unsolicited or unexpected email.

If you have any questions or concerns, or if you accidentally clicked on one of the links, please contact the ITS Support Center. Thank you.

The email scam may appear as an image in your email and reads as follows:

From: webmaster@hallmark.org <webmaster@hallmark.org>
Date: April 16, 2009
Subject: You have received a card from a family member!

Hello!

You have recieved a Hallmark E-Card.

To see it, click here [link omited],

There's something special about that E-Card feeling. We invite you to make a friend's day and send one [link omited].

Hope to see you soon,
Your friends at Hallmark

Your privacy is our priority. Click the "Privacy and Security" link at the bottom of this E-mail to view our policy.

Email Scam Alert - April 14, 2009

Please be advised that an email scam that appears to be from the "UCSC ITS Help Desk" with the subject, "Account Upgrade/Maintenance All MyUCSC Accounts" has been sent to a number of UCSC email accounts. This phishing scam is another attempt to trick you into revealing your user ID and email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

Subject: Account Upgrade/Maintenance All MyUCSC Accounts
Date: Tue, 14 Apr 2009
From: UCSC ITS Help Desk <help@ucsc.edu>
Reply-To: technicalsupportdesk@j-mail.info
To: undisclosed-recipients:;ITS Support Help Desk

Attn. MyUCSC Users,

Account Upgrade/Maintenance All MyUCSC Accounts

We regret to announce to you that we will be making some vital
maintenance on our MyUCSC account. During this process you
might have login problems in signing into your MyUCSC account, but to prevent
this you have to confirm your account immediately after you receive this
notification.

To confirm and to keep your MyUCSC account active during
and after this process, please reply to this message with the below
account information's. Failure to do this might cause a permanent
deactivation of your MyUCSC account from our database to enable
us create more spaces for up coming students.

To confirm your account, send your MyUCSC login details, stating:

User ID:
Password:

Your MyUCSC account shall remain active after we have successfully
confirmed and upgraded your account.

Thank you for your swift response to this notification we apologize for any
inconvenience.

ITS Support Help Desk

C 2009 ITS Service The Regents of the University of California. All
rights reserved.

(back to top)

Email Scam Alert - February 26-April 4, 2009

Please be advised that an email scam with the subject, "Your Account Closes in 2 Day(S)" or "Important Message From Helpdesk" has been sent to a number of UCSC email accounts. This phishing scam is another attempt to trick you into revealing your email password. PLEASE DELETE THIS EMAIL AND DO NOT REPLY!

** You should never disclose your password to anyone, even if they say they work for UCSC, ITS, or other campus organizations. **

Please contact the ITS Support Center if you have any questions. The email scam reads as follows:

Dates: February 26, 2009 through April 4, 2009
To: undisclosed-recipients:;
Subject: Your Account Closes in 2 Day(S) -- or -- Account Expire in 2(Days) -- or -- Important Message From Helpdesk
Reply-To: helpweb11@yahoo.com.hk -- or -- helpdesk.upgrade@yahoo.com.hk

The Helpdesk Program that periodically checks the size of your e-mail space is sending you this information. The program runs weekly to ensure your inbox does not grow too large, thus preventing you from receiving or sending new e-mail. As this message is being sent, you have 18 megabytes (MB) or more stored in your inbox. To help us reset your space in our database, please enter your current user name (_________________) password (_______________)
** Some versions of this scam also ask for email: E-mail (_______________)

You will receive a periodic alert if your inbox size is between 18 and 20 MB. If your inbox size is 20 MB, a program on your Webmail will move your oldest e-mails to a folder in your home directory to ensure you can continue receiving incoming e-mail. You will be notified this has taken place.

If your inbox grows to 25 MB, you will be unable to receive new e-mail and it will be returned to sender. All this is programmed to ensure your e-mail continues to function well.

Thank you for your cooperation.
Help Desk

(back to top)

Email Scam Alert - February 19, 2009

Please be aware of a new email scam designed to look like a electronic greeting card (ecard) reminder. The links in this email can harm your computer. PLEASE DELETE THIS EMAIL. Do not click on the links, and do not respond.

This email scam is another excellent reminder not to click on links or open attachments in unsolicited or unexpected email.

If you have any questions or concerns, or if you accidentally clicked on one of the links, please contact the ITS Support Center. Thank you.

The email scam reads as follows:

Subject: Reminder: Your ecard from adrian is waiting for you at Egreetings.com
Date: Fri, 20 Feb 2009 01:02:10 -0500
From: Ecard from Egreetings <ecards@egreetings.com>

We noticed that you haven't picked up your greeting that adrian (adirey2fig@yahoo.com) sent to you on 02/15/2009.

To view your ecard, click on the link below:
[link omited]

For your security, if you'd prefer not to click on links within this email:
1. Type [link omited] into your web browser
2. Locate the ecard pickup box in the left-hand area of the page
3. Enter the following code --> [code omited]

Please do not reply to this email. To help resolve your issue or question, go to:
[link omited]
We have an extensive help center that may answer your questions, or you can choose to email us from there.
To read about email protection, type [link omited] into your web browser.

Thank you!
Your friends at Egreetings.com

(back to top)

Email Scam Alert - February 8, 2009

Please be aware of a new email scam designed to look like you received a virtual postcard from postcard.org. The links in this email can harm your computer. PLEASE DELETE THIS EMAIL. Do not click on the links, and do not respond.

This email scam is another excellent reminder not to click on links or open attachments in unsolicited or unexpected email.

If you have any questions or concerns, or if you accidentally clicked on one of the links, please contact the ITS Support Center. Thank you.

The email scam reads as follows:

From: received@postcard.org
Subject: You have just received a virtual postcard from a friend !
Date: February 8, 2009 or February 9, 2009

You have just received a virtual postcard from a friend !

You can pick up your postcard at the following web address:

Click here to pick up your postcard [link omitted]

If you can't click on the web address above, you can also visit 1001 Postcards at [link omitted] and enter your pickup code, which is: [code omitted]

(Your postcard will be available for 60 days.)

Oh -- and if you'd like to reply with a postcard, you can do so by visiting this web address: [link omitted] (Or you can simply click the "reply to this postcard" button beneath your postcard!)

We hope you enjoy your postcard, and if you do, please take a moment to send a few yourself!

Regards,
1001 Postcards
[link omitted]

(back to top)

Malicious Email Alert - January 26, 2009

There are two recent email scams from spammers disguised to look like they are from Hallmark (electronic postcards) and the Coca Cola Company dated January 26, 2009. PLEASE DELETE THESE EMAILS. Do not open the attachments, and do not respond.

The fake Hallmark.com email comes with a Zip file attachment asking you to read a postcard from a friend. Please do not open this Zip file. Just delete the email. The Coca Cola email is a fake job offer, also with a Zip file attachment that is supposed to be the job application. Please delete this email as well.

This email scam is an excellent reminder not to open attachments or click on links in unsolicited email.

ITS is looking into why these scams are going through our spam filter system. If you have any questions or concerns, or if you accidentally click on the attachment in one of these messages, please contact the ITS Support Center. Thank you.

Additional details:
The malicious emails have subjects such as,

You've received A Hallmark E-Card!
Job offer from Coca Cola!
IKEA's New Planning Software

All of these emails include a "zip"attachment that may contain a virus or other harmful program. These attachments have file names such as,

postcard.zip
job_application_form.zip
planning_software.zip

Again, PLEASE DELETE THESE EMAILS. Do not open the attachments, and do not respond.

(back to top)

Security Alert Sent to Campus about Bogus Email Greeting Cards (e-cards)

July 18, 2007

To: UCSC Faculty, Staff, and Students
From: Information Technology Services (ITS)

Re: Email Greeting Card (e-card) Virus Alert

We write to inform you about a new virus that is infecting computers. As you may already be aware, a new type of malicious email has hit the campus: bogus electronic greeting cards, or e-cards. Clicking on the link included in these emails can infect your computer with a virus. This has already happened to a number of individuals on campus.

This announcement contains two important messages.

1) Do not open these electronic greeting cards or click on the links. Simply delete any message that links you to e-cards.

2) If you accidentally click on a link in one of these messages and think your computer might have been infected, please contact the ITS Support Center immediately. The ITS Support Center staff is ready to help you find out if your computer is infected and take any necessary steps to fix the problem.

This latest attack is an excellent reminder not to click on links or open attachments in unsolicited email. For the time being, with respect to email greeting cards, it is best to assume that any that you receive are bogus and potentially harmful. Don't open them or click on links in them. If you think that an e-card may be legitimate, be sure to check it out carefully: verify that it is addressed to you personally, it is from someone you know, the spelling and grammar in the email are correct, and the "from" address and link look legitimate. When in doubt (and this is true for all unsolicited email), contact the sender to verify before clicking on the link.

ITS is currently working on enhancements to our existing anti-virus software to block these new virus forms.

If you have a question or need technical help, please submit an IT Request ticket at https://itrequest.ucsc.edu or contact the ITS Support Center by email help@ucsc.edu, telephone 459-HELP(4357), or in-person Kerr Hall Room 54.

Thank you,

Information Technology Services (ITS)
http://its.ucsc.edu

(back to top)