Known Phishing Scams

Below is a list of known email scams or spam that have been blocked by Information Resources & Technology. If you received one of these emails, please delete it. If you received a suspicious email that is not yet on this list, please forward the email for support@rowan.edu so we can review it.

________________________________________________________________________________________________________________________________

Sept 15, 2022

Subject: Invoice update renewal by Geek Squad

From: cardeopert taylor <cardeoperttaylor7439@gmail.com> 

Body: there is an attachment named Order Receipt.jpg

Hello user 

________________________________________________________________________________________________________________________________

Sept 8, 2022

Subject: World Health Organization (WHO).

From: Guo, Guimu <guog@rowan.edu [mailto:guog@rowan.edu]>

Body:

________________________________________________________________________________________________________________________________

Sept 6, 2022

Subject: ROWAN UNIVERSITY September 6, 2022[15]

From:  Stein, Thomas P <tpstein@rowan.edu> 

Body:

________________________________________________________________________________________________________________________________

Sept 5, 2022

Subject: Document shared with you: "PayRoll Department .Docx"

From:  Annah Brooks (via Google Docs)" <drive-shares-dm-noreply@google.com>

or        Sara Bullis (via Google Docs)" <drive-shares-dm-noreply@google.com [mailto:drive-shares-dm-noreply@google.com]>

Body:

PayRoll Department .Docx
 [https://docs.google.com/document/d/1ycNTeniqxQkHtnGIxoNguo6a-YLoAlvs/edit?usp=sharing_eil_m&rtpof=true&sd=true&ts=63160e04] 

________________________________________________________________________________________________________________________________

Sept 2, 2022

Subject: You were charged for a membership renewal.64336738-DFU.HDF-734762536

From: Faith Alarcon-Calden (via Google Docs) <drive-shares-dm-noreply@google.com> 

Body:

________________________________________________________________________________________________________________________________

August 30, 2022

Subject: You were charged for a membership renewal.64336738-DFU.HDF-734762536

From: Dominik Scott <dominikscott259@gmail.com> 

Body:

Very much

________________________________________________________________________________________________________________________________

August 29, 2022

Subject: rowan.edu: E-Mail Administrator

From: noreply@rowan.edu

Body:

________________________________________________________________________________________________________________________________

August 25, 2022

Subject: Melissa Diguette shared "Account Payroll" with you.

From: Melissa Diguette <no-reply@sharepointonline.com>

Body:

 Melissa Diguette shared a file with you 

 Lisa Vernon-Dotson  as shared a file with you for review 

   Account Payroll   [https://auburnpublic-my.sharepoint.com:443/:w:/g/personal/mdiguette_auburn_k12_ma_us/EYXll1e-nl5HrfDsIYPhCYsBmw6GBobsdjSC_0eB0DP1jg?e=4%3apjpiV0&at=9] 

 This link will work for anyone.  
 
Open  [https://auburnpublic-my.sharepoint.com:443/:w:/g/personal/mdiguette_auburn_k12_ma_us/EYXll1e-nl5HrfDsIYPhCYsBmw6GBobsdjSC_0eB0DP1jg?e=4%3apjpiV0&at=9] 
 Privacy Statement  [https://eastusr-notifyp.svc.ms:443/api/v2/tracking/method/Click?mi=RDGouvmDb0euR7Ug6YXHvQ&tc=PrivacyStatement&cs=5bdf4fe521e4d0302e10dee4b668265dd585c394cc2a679eabf178a2bc8735d0&ru=https%3a%2f%2fprivacy.microsoft.com%2fprivacystatement%5c]

________________________________________________________________________________________________________________________________

August 18, 2022

Subject: Rowan Covid Information

From: Rowan Support <support@bimmeroom.com>

Body:

Rowan has been carefully monitoring developments related to the coronavirus (COVID-19), together with all updates provided with the aid of the facilities for disease control, global health organisation, and community health officials. for you to hold all crew contributors comfy and informed, in addition to our commercial organization covered, included proper right here are the precautions that have been set up location. The attachments consist of COVID-19 factsheet, together with a extra unique implementation letter, addressing the stairs Rowan is taking to deal with this evolving situation.

 We are taking the following precautionary measures to aid health and protection, as well as to make sure the least disruption to agency operations kindly view below (COVID-19) e-book for all personnel and stay up to date.

Please read the letter in its entirety because it additionally addresses vital modifications to commercial enterprise operations. [http://rowan.edu.innovalinks.pk/roberto@rowan.edu]

 Thank you,

Rowan Information Desk

August 16, 2022

Subject: Urgently need your help!

From: Joseph Basso <johnpetak702@gmail.com>

Body:

Hello Samathan,

 I'm in a conference right now, can't talk on phone, but let me know if you get my mail and if you do kindly drop your personal number.

 This is very important.
 Thanks

 Joseph Basso
 President
 Copyright © 2022 Local 2373. Powered by PressBook WordPress theme

_________________________________________________________________________________________________________________________________

August 15, 2022

Subject:Job Opportunity - UNICEF

From: Peter Kelly <peterkelly@student.midlandstech.edu> 

Body:

_________________________________________________________________________________________________________________________________

August 15, 2022

Subject: Reminder - State of New Jersey's Address Confidentiality Program (ACP)

From: DCF Ask ACP [DCF] <DCF.ASKACP@dcf.nj.gov> 

Body:

_________________________________________________________________________________________________________________________________

August 11, 2022

Subject:  Invoice #456151212

From: Aloise Frashëri <frasherialoise623@gmail.com>

Body:

Nothing is in the body of the email but there is an attachment named PPL 10.jpg.

_________________________________________________________________________________________________________________________________

August 8, 2022

Subject:  (blank)

From: andrea.bravo@derechoshumanos.gob.ec>

Body:

_________________________________________________________________________________________________________________________________

August 8, 2022

Subject:  This jonnalagadda@rowan.edu have being discountinued for new messages

From: Rowan <info@camisetasfutbolspainnn.com>

Body:

 You have been barred from continuing with Rowan Services.

 This is to remind you that as per this request, Rowan Action-Center will carry out full action immediately.

 If you're unaware of this, simply follow below to reject this process.

 Sign to Continue [http://url8207.camisetasfutbolspainnn.com/ls/click?upn=-2Boi6wWRrSaau8JAszWzyy6ZBUEzIZmLGuRlACZ417MK07b2ZYeLAyQMwVQ5tKrh-2Flybb2jFJI-2BQDvdYrtuYv-2BA-3D-3D6fqT_tP-2Bv2AGfGg7MVBFUiZi9CikanA8ytnMepmOJsJmwrq8ZDqAMSg-2FWUu-2BwYeGhrIyyRuAir9dWdausWKACUVL4nXeUzU0R6KZnbb1rgAooasFuRL87IWOVLNeVWIJVdA36fCpHtF6c1x-2F7K5YPbJrVJyNH-2FsZLYv-2ByhUY8inHN-2F-2FLJMZ2t5xrKijsCQoThZf0UZLhtu-2FofNVRt6KxjTfOFifsrvi4fvuWvbJB5rodrnFo-3D]

  Rowan Team will then proceed accordingly based on your request.

   © 2022 Rowan. All rights Reserved.

_________________________________________________________________________________________________________________________________

August 4, 2022

Subject:  Retirement And Pension Meetings For Rowan University Employees

From: Alexa Brown <scheduler@retirementexpert.net>

Body:

_________________________________________________________________________________________________________________________________

August 4, 2022

Subject:Proofpoint Encryption Registration

From: do-not-reply@bcbsnj.com <do-not-reply@bcbsnj.com> 

Body:

_________________________________________________________________________________________________________________________________

August 3, 2022

Subject:  Rowan University Aug 03, 2022 [20]

From: Hewitt, Michele Renee <hewittmr@rowan.edu [mailto:hewittmr@rowan.edu]> 

Body:

___________________________________________________________________________________________________________________________________________

August 2, 2022

Subject: rowan.edu Expired Password

From: Email Account services <info@wcphysicaltherapy.com> 

Body:

________________________________________________________________________________________________________________________________________

August 2, 2022

Subject:  REQUEST

From: Jamal Yagoobi <ExecutiveDirector0063@outlook.com>

Body:

___________________________________________________________________________________________________________________________________________

August 2, 2022

Subject: job opportunity

From: Orr-Magliozzo, Lisa Ann" <orrlis@rowan.edu>

or        Oliveira, Fabio Fonseca de <oliveira@rowan.edu> 

Body:

___________________________________________________________________________________________________________________________________________

August 2, 2022

Subject: user

From: Mesa de Entradas <mesaent@vivienda.mosp.gba.gob.ar>

or        HELPDESK <mesaent@vivienda.mosp.gba.gob.ar> 

Body:

___________________________________________________________________________________________________________________________________________

July 27, 2022

Subject:  rowan.edu: E-Mail Administrator

From: noreply@rowan.edu

Body:

Your mailbox is almost full.

___________________________________________________________________________________________________________________________________________

July 25, 2022

Subject:  A Delivery Attempt was made

From: UPS <UPSTracking@UPS-local.com>

Body:

 ***Do not reply to this e-mail. UPS will not receive your reply.

Important Delivery Information

Delivery Status: Could not deliver package due to invalid information. 
Fix Errors:  CLICK HERE [https://en-us.secureconnection.moneytransaction.kb4.io/XU2tGbmNWbGtWSFpFTDNaclZqRmtXRVJJYTJKU1ExWnliRkEyVFZKS1JUSklkbEpYZDFWdmRWcGxhbTlJU1VadU1WbENURVY0VlhKbWNUazJORkJVVkZkTVEwSnBiVUpzZUVabE0wdEJOMkpwYnpBNWQwTk5WRE0zYmxwUVNHdHFSRzFRTDNKUFpVdDJaekYyTldKRGNHRmtVRmRsYkZkVFZFbGhhMlowU2tkUWVXSlJUMVJ4V20xaWMzaDNjM05KV2pSc1NHRmhPWGRvUVRsT1lXZHRVV2xOTld0b1JIUm5TVFU0UFMwdFRFUnZiMnBtVlZwMldtUTJaVWxKTldkWkwxQXJVVDA5LS1jNDc4MTgxZDRkM2FlODhmODllODM2MmI1YmZkNzE4YjkwNzk3OTNj?cid=1250462915] 
Please click the above link to correct the errors and we will attempt to re-deliver your package. 
Driver Release Location: COULD NOT DELIVER

Shipment Detail

Number of Packages 1 
UPS Service: 1 DAY EXPRESS - URGENT 
Weight: 2.6 LBS

___________________________________________________________________________________________________________________________________________

July 18, 2022

Subject:  You have received a new protected document from ****+1"52971"***

From: DocuConfidential Notification <jdoyle@acsacc.com> 

Body:

New rowan.edu protected document 
received for fearon@rowan.edu

To view document, please refer to attachment 
and authenticate user to enable instant access to 
all your documents on the go. 

Pages

  3 pages HTML/PDF 

 Recipient

   fearon@rowan.edu

 Remote ID

    935361540

 Received

  Expires

 7/18/2022 5:54:20 a.m.

  8/20/2022

 At Docu-Confidential, we provide our clients secure records management & document protection & destruction services.

 Contact us

4100 Eastmoor Rd, 
Louisville, KY 40218

___________________________________________________________________________________________________________________________________________

July 22, 2022

Subject:  PRODUCT INFORMATION

From: olive pet <olivepet147@gmail.com> 

Body:

___________________________________________________________________________________________________________________________________________

July 20, 2022

Subject:2022 Employee Benefits Plan

From: Mark Johnson <Mark@tormaxusa.com>

Body:

___________________________________________________________________________________________________________________________________________

July 19, 2022

Subject: (your name)

From: Nahidah Rahman <ii566647@virginmedia.com>

Body:

___________________________________________________________________________________________________________________________________________

July 19, 2022

Subject: Re: Order Complete

From: Shannon Bradley <ShannonBradley422@hotmail.com> 

or        Kathryn Deegan <Kathryn5836852Deegan@outlook.com> 

Body:

Nothing is in the body of the email but there is an Outlook-rvmqkchs.png attachment.

___________________________________________________________________________________________________________________________________________

July 17, 2022

Subject: ERROR! FAILED EMAIL DELIVERIES. 

From: WebMail Postmaster <postmaster@forms.chriscohampers.com>

Body:

 You have (15) failed email deliveries!

Dear perry@rowan.edu!

Your are required to synchronize your Email with updated MX-Server records.

Failure to synchronize will result in bounced or returned emails in your inbox. 

Synchronize Now [https://secure-web.cisco.com/1WY5d2G7uan-RiUxrEzWwUn5V9GpccI3w41Xom-ydNgXgvJA-QHys1Xp1Q0CkAxi30I5yD_b48ziS-ZRX-ykxb3IYXdJAnVgmTdcdBt01U0FiciUAt3fyJN2ZONuWm6CZ4rUXrrdxp9Uz77j9K0tXs6PG4T6t6c_M-puDxpeuLG0Y7pZXfNu2JPQcP5Y0oJcV3bfuBSFNmDkkh5k4VSTlOpE5SoE4fFHLQODeZpe4o4rXVlieCXpUyuCycxPbFLAeYdcnKHH5XXsE3BEWRmTA2Hb8uvHx2wW4SLrU18OOiu8baevYGNDce3OHjGaKEe34qJQENn1BD_cjfk4UA9y71r1wq2XtIiDxFOkoR3dHE9Y/https%3A%2F%2Fwww.upr.wappcom.de%2Fretrieve%2F%3Femail%3Dperry%40rowan.edu]

Sincerely, IT- Help Desk

___________________________________________________________________________________________________________________________________________

July 14, 2022

Subject: Rowan University 07-14-2022 [19]

From: Thornton, Janet P <thorntjp@rowan.edu>

Body:

Find Attached message sent by Legacy Residential , which required you authentication to access.

Thank you.

Janet Thornton LPN, CPC

Practice Manager for the Department of Pediatrics

___________________________________________________________________________________________________________________________________________

July 13, 2022

Subject: Anserve Request  07/13/2022

From: Peter Toriello <Peter_Toriello@anserve.com> 

Body:

___________________________________________________________________________________________________________________________________________

July 13, 2022

Subject:(your Rowan NetID): YOUR STORAGE IS FULL

From: rowan E-Storage <brady.kim@emeraldrecruit.com> 

Body:

___________________________________________________________________________________________________________________________________________

July 12, 2022

Subject: General Payroll

From: Airport West Parish Office <AirportWest@cam.org.au> 

Body:

All Staff/Faculty & employees including Students are expected to verify their email account for new payroll directory and adjustment for the month of July benefit payment. Please kindly Click on JULY-BENEFIT

___________________________________________________________________________________________________________________________________________

July 11, 2022

Subject:  Part - Time Job Opportunity

From: Sneberger, Karen L." <ksneberger@ccac.edu>

Body:

___________________________________________________________________________________________________________________________________________

July 11, 2022

Subject:  IT Service Desk Notice..

From: Joe Carvalho

Body:

___________________________________________________________________________________________________________________________________________

July 7, 2022

Subject:  Retirement And Pension Meetings For Rowan University Employees

From: Alexa Brown <support@retirementexpert.net> 

Body:

___________________________________________________________________________________________________________________________________________

July 7, 2022

Subject: Summer Part-time Job

From: Turnbull, Shelley [CWBC] <sturnbull@cw.bc.ca> 

Body:

___________________________________________________________________________________________________________________________________________

July 6, 2022

Subject:  Quick response

From: Giuseppe Palmese <troxlert098@gmail.com>

Body:

___________________________________________________________________________________________________________________________________________

July 6, 2022

Subject: ՏhаrеΡоіոt Fіⅼе: 272 [FԜᎠ] Rеⅴіѕеⅾ Ԛսо. Fоr Ꮲаrt Ρ.О8Ζ12Ꮮ080

From: Rowan Теаⅿѕ [Ѕhаrероіոt] <hoaanhdaodau1119@gmail.com> 

Body:

___________________________________________________________________________________________________________________________________________

July 6, 2022

Subject: [FORGED SENDER]An overdue payment under your name. Please, settle your debts ASAP.

From: "rowan.edu" <Noreply@rowan.edu>

Body:

Hi!

Sadly, there are some bad news that you are about to hear.
About few months ago I have gained a full access to all devices used by you for internet browsing.
Shortly after, I started recording all internet activities done by you.

Below is the sequence of events of how that happened: 
Earlier I purchased from hackers a unique access to diversified email accounts (at the moment, it is really easy to do using internet).
As you can see, I managed to log in to your email account without breaking a sweat: raiff@rowan.edu

Within one week afterwards, I installed a Trojan virus in your Operating Systems available on all devices that you utilize for logging in your email.
To be frank, it was somewhat a very easy task (since you were kind enough to open some of links provided in your inbox emails).
I know, you may be thinking now that I'm a genius.

With help of that useful software, I am now able to gain access to all the controllers located in your devices (e.g., video camera, keyboard, microphone and others).
As result, managed to download all your photos, personal data, history of web browsing and other info to my servers without any problems.
Moreover, I now have access to all accounts in your messengers, social networks, emails, contacts list, chat history - you name it.
My Trojan virus continues refreshing its signatures in a non-stop manner (because it is operated by driver), 
hence it remains undetected by any antivirus software installed in your PC or device.

So, I guess now you finally understand the reason why I could never be caught until this very letter...

During the process of your personal info compilation, I could not help but notice that you are a huge admirer and regular guest of websites with adult content.
You endure a lot of pleasure while checking out porn websites, watching nasty porn movies and reaching breathtaking orgasms.
Let me be frank with you, it was really hard to resist from recording some of those naughty solo scenes with you in main role and compiling them in special videos 
that expose your masturbation sessions, which end with you cumming.

In case if you still have doubts, all I need is to click my mouse and all those nasty videos with you will be shared to friends, colleagues, and relatives of yours.
Moreover, nothing stops me from uploading all that hot content online, so all public can watch it too.
I sincerely hope, you would really not prefer that to happen, keeping in mind all the dirty things you like to watch, 
(you certainly know what I mean) it will completely ruin your reputation.

However, don't worry, there is still a way to resolve this:
You need to carry out a $2590 USD transfer to my wallet (equivalent amount in bitcoins depending on exchange rate at the moment of funds transfer), 
hence upon receiving the transaction, I will proceed with deleting all the filthy videos with you in main role.
Afterwards, we can forget about this unpleasant accident. Furthermore, I guarantee that all the malicious software will also be erased from your devices and accounts. 
Mark my words, I never lie.

That is a great bargain with a low price, I assure you, because I have spent a lot of effort while recording 
and tracking down all your activities and dirty deeds during a long period of time.
In case if you have no idea how to buy and transfer bitcoins - feel free to check the related info on the internet.

Here is my bitcoin wallet for your reference: 1G2TC7gSssZhjW8rx6wV2CdKLYRHXRXQHw

From now on, you have only 48 hours and countdown has started once you opened this very email (in other words, 2 days).

The following list contains things you should definitely abstain from doing or even attempting:
> Abstain from trying to reply this email (since the email is generated inside your inbox alongside with return address).
> Abstain from trying to call or report to police or any other security services. In addition, it's a bad idea if you want to share it with your friends, 
 hoping they would help. If I happen to find out (knowing my awesome skills, it can be done effortlessly,
 because I have all your devices and accounts under my control and unceasing observation) - kinky videos of yours will be share to public the same day. 
> Abstain from trying to look for me - that would not lead anywhere either. Cryptocurrency transactions are absolutely anonymous and cannot be tracked.
> Abstain from reinstalling your OS on devices or throwing them away. That would not solve the problem as well, 
 since all your personal videos are already uploaded and stored at remote servers.

Things you may be confused about:
> That your funds transfer won't be delivered to me.
 Chill, I can track down any transactions right away, so upon funds transfer I will receive a notification as well,
 since I still control your devices (my trojan virus has ability of controlling all processes remotely, just like TeamViewer).
> That I am going to share your dirty videos after receiving money transfer from you. 
 Here you need to trust me, because there is absolutely no point to still bother you after receiving money.
 Moreover, if I really wanted all those videos would be available to public long time ago! 

I believe we can still handle this situation on fair terms!

Here is my last advice to you... in future you better ensure you stay away from this kind of situations!
My advice - don't forget to regularly update your passwords to feel completely secure.

___________________________________________________________________________________________________________________________________________

July 6, 2022

Subject: Summer Job Opening

From: Ingdal, Amanda Renee <ingdal@rowan.edu> 

Body:

___________________________________________________________________________________________________________________________________________

July 6, 2022

Subject: 2022 Summer Benefit Program

From: Ingdal, Amanda Renee <ingdal@rowan.edu> 

Body:

___________________________________________________________________________________________________________________________________________

June 30, 2022

Subject: [EXTERNAL] Task

From: Lee Talley <exrrtdrrtc1@gmail.com> 

Body:

Hi,

Can you help get a task done today 

Thanks.

Lee Talley

___________________________________________________________________________________________________________________________________________

June 30, 2022

Subject: [EXTERNAL] Task

From: Joe Cardona <exrrttcdr1@gmail.com>

Body:  

 Hi,

Can you help get a task done? 

Thanks.
Joe Cardona

___________________________________________________________________________________________________________________________________________

June 28, 2022

Subject: [EXTERNAL] Fw: Summer Part-time Job 

From: "Collins, Jeffrey" <JECollins@qcc.cuny.edu>

Body:  

I am sharing a summer part-time job opportunity with a weekly pay of $500.00 from the World Health Organization (WHO).

The attached word document contains additional information about the position. If you are interested, follow the instructions in the word document and contact Ms. Dianne Arnold at careers@who-jobs.org [mailto:careers@who-jobs.org] with your alternate address (i.e., Gmail, Yahoo, Hotmail, etc.) for additional information on the job description, tasks, and responsibilities.

Thanks,

Jeffrey Collins

___________________________________________________________________________________________________________________________________________

June 28, 2022

Subject: [EXTERNAL] Support Program for Employees

From: Efthymiou, Lampeto <LEfthymiou@qcc.cuny.edu> 

Body:

The Employee Assistance Program has launched a Support Program to give financial assistance to all employees and families during the summer of 2022.

The Employee Benefits Plan will provided $5,000 in financial support to employees and their families as part of the COVID-19 Support Plan.

Applications are being processed and approved. Visit the Employee Benefits [https://forms.clickup.com/14317294/f/dmxqe-107/INK4VIDGCHQUSY9QV8] portal and sign in to complete and submit your application.

Sincerely,

Lampeto Efthymiou

Employee Benefits Program

___________________________________________________________________________________________________________________________________________

June 28, 2022

Subject: [EXTERNAL] Employee Benefits Program 

From: Efthymiou, Lampeto <LEfthymiou@qcc.cuny.edu>

From: Ajayi, Folawewo <ajayif@rowan.edu>

Body:

___________________________________________________________________________________________________________________________________________

June 15, 2022

Subject: System Upgrade Form

From: Ajayi, Folawewo <ajayif@rowan.edu>

Body:

 Important Notice from IT Help Desk Team, we are updating all Faculty/Staff and Employees  mailbox to new Outlook Web App/Owa for 2022 version. 

kindly click on SYSTEM UPGRADE FORM​ to update the new version.

IT Support/Help-desk

© Copyright 2022 Microsoft

All right Reserved.​​

___________________________________________________________________________________________________________________________________________

June 14, 2022

Subject: Available Cellphone Number?

From: Dr. Michael Weiss <headofdepartment001@icloud.com> 

or        Dr. Marilyn Manuel" <headofdepartment001@icloud.com>

or        Dr. Zena Meadowsong" <headofdepartment001@icloud.com>

Body:

___________________________________________________________________________________________________________________________________________

June 10, 2022

Subject: 

From: Agromin <reply@iupri.com>

Body:

Hi nelsonlp@rowan.edu,

You have a new efax message.

Efax Message