Malware - Notice of appearance in Court #0000266400

From: State Court <>
Date: Tue, Mar 24, 2015 at 8:14 AM
Subject: Notice of appearance in Court #0000266400
To: [redacted]

Notice to Appear,

You have to appear in the Court on the March 29.
Please, prepare all the documents relating to the case and bring them to Court on the specified date.
Note: If you do not come, the case will be heard in your absence.

The Court Notice is attached to this email.

Yours faithfully,
Felix Goldstein,
District Clerk.
attachment 0000266400.doc.js 

Identity Theft - Invitation

From: Civic Duty Update <>
Date: Tue, Jan 20, 2015 at 2:37 PM
Subject: Invitation

Dear Prospective Juror 0150

It is the policy of the United States that all litigants in Federal courts entitled to trial by jury shall have the right to grand and petit juries selected at random from a fair cross section of the community in the district or division wherein the court convenes. It is further the policy of the United States that all citizens shall have the opportunity to be considered for service on grand and petit juries in the district courts of the United States, and shall have an obligation to serve as jurors when summoned for that purpose.

As an American citizen, it is your civic duty to respond to a jury Summons and, if chosen, to serve as a juror. You have officially been invited so.

Click here to fill out the Ejury Duty Form now.  <>


National EJuror Program

Password Theft - Your online access has been locked

---------- Forwarded message ----------
From: Online Banking <>
Date: Mon, Dec 22, 2014 at 1:32 PM
Subject: Your online access has been locked

You have exceeded the maximum number of attempts to sign in. For security, your account has been locked.

To unlock your account access click: Sign In to Online Banking and proceed with the verification.

© Bank of America, N.A. Member FDIC. Equal Housing Lender

Password Theft - IT Service; Update Your Account Now

From: Gregg V walker <redacted>
Date: Wed, Nov 26, 2014 at 7:52 AM
Subject: FW: IT Service; Update Your Account Now

Dear User,
We wrote you that you may finally lose your mailbox if your update is not done and we are reminding you again that we are migrating to a new email interface to avoid the problem of excessive spam on our mail server. So we are currently doing upgrade on our server. Please, visit the account ownership verification page below to verify your account details and avoid losing your inbox.

Thank you,
Your Technical Team

Password theft - suspicious

From: GW Web Portal <>
Date: Wed, Nov 19, 2014 at 10:23 AM
Subject: suspicious

We've detected something unusual about your webmail account. . For a proof of
ownership,kindly click here and verify your information.

Failure to comply indicate an intruder, for security reasons we may
have to close your webmail account permanently.

GW Web Portal

Password Theft - RE: Secure Email Verification

From: [Redacted] <[redacted]>
Date: Tue, Nov 11, 2014 at 8:32 AM
Subject: RE: Secure Email Verification
To: [redacted] <[redacted]@>

Dear user,
We currently upgraded to 4GB space.Click on  Current  Faculty and Staff email upgrade  to confirm details of your email account.

Password theft - Email Migration - Don't Lose Email Access!

From: [redacted] <[redacted]>
Date: Tue, Nov 11, 2014 at 8:15 AM
Subject: Email Migration - Don't Lose Email Access!

This notification message is from your Admin Server Portal. We currently undergoing a regular mailbox maintenance, due to recent congestion in our Server. We want to update all email account scheduled for today. If your Mailbox is not updated today, Your account will be inactive and cannot send or receive emails. Kindly CLICK HERE: to get your mailbox account updated.

Thank you!
Admin Server Portal.

Password Theft - Password will expire in 4 days

From: Addams, Billey [
Sent: Wednesday, October 15, 2014 07:48 AM
To: <
Subject: Password will expire in 4 days 

Click Here <> To Validate E-mail

IT-Service Help Desk
DISCLAIMER *** This message and any attachments are confidential and intended solely for the addressee. The following link will display the full disclaimer: ***

Password Theft - EMAIL UPGRADE

Sent: October-10-14 7:32 AM



Money Mule - JOB OFFERED

From: Ed WoodWard <>
Date: Thu, Oct 9, 2014 at 11:06 AM

Our recruitment team viewed your resume published on (CRAIGSLIST) and we are pleased with your qualifications,As a company (ORTUS HOLDINGS LIMITED) we believe you have the required qualifications.
To proceed with this ADMINISTRATIVE ASSISTANT POSITION, you must undergo an online interview via yahoo messenger. You are required to have a yahoo instant messenger on your computer, if you do not have one already  installed on your computer, you are to have it downloaded at
 I want you to setup a yahoo account at if you do not have one and afterwards log on to yahoo messenger and send an Instant Message to  (Mr Ladon Beadsley) on his yahoo ID ( As soon as possible for the interview so that you can get Started for the position.


Hope to read back from you as soon as possible.

 Kind Regards,
 Mr Ed WoodWard,
 Human Resource Dept.

Password theft - //Gwu

From: [redacted]
Date: Thu, Oct 9, 2014 at 3:59 AM
Subject: //Gwu

Dear Gwu Webmail User,

This message is sent automatically by our web server to inform you of our system upgrade and validation to help protect your web mail account, we recommend you follow this link: to complete the verification process.
NOTE: Failure to comply may lead to confiscation
of account.


I.T Web-mail Admin.

Password theft - Email Account Service

From: "Blackboard Services" <[redacted]>
Date: October 9, 2014 at 1:45:30 PM EDT
Subject: Email Account Service

New form posted to Blackboard | Technology. Your are to view this updae form regarding your next coming session section.

Kindly sing in to view your form online.

Sign In <>

Blackboard | Services

Password Theft - Your maibox is full

From: Lyn, Cindy R. [redacted]
Date: Wed, Oct 8, 2014 at 10:51 AM
Subject: Your maibox is full

Your maibox is full.
Your Maibox Is Full " CLICK HERE " <> To Increase Your Inbox And Received New Massage.
Copyright © 2014 Staff and Faculty Mailbox Portal.

Password Theft - Zimbra sign in -alert

From: Zimbra Mail Services <>
Date: Saturday, October 4, 2014
Subject: Zimbra sign in -alert
To: Recipients <servicefre_zimbra@netvigator.

Dear Zimbra User,
This is to inform you that someone else was trying to log into your  account from a different location {IP: Iran : 03/10/2014 by 14:36 PM GTM
If this is not you kindly click below to sign in your full email account and verify your account, You have only 12 hours to do this in order to keep your account active.
                                      Click Here  <>

Technical support team.

Password theft - CLICK-TO-VALIDATE

From: Tanya Kollenz Monteiro <>
Date: Fri, Oct 3, 2014 at 10:56 AM
To: Tanya Kollenz Monteiro <Tanya_Kollenz_Monteiro@bcit.

Your password will expire in 12 hours  CLICK-TO-VALIDATE  <> Your email account for 2014 edition

Password theft - ITS Helpdesk Admin Notification#

From: Tanya Kollenz Monteiro
Sent: October 3, 2014 7:32 AM
To: Tanya Kollenz Monteiro
Subject: ITS Helpdesk Admin Notification#

Dear user,
The following evaluations have been assigned to you. Please log in to complete these evaluations.
NOTE: Your log in will time out after 60 minutes. Your responses will be lost if you do not click on the "secure" button before 60 minutes lapses. There is no prompt when your 60 minute session has expired. Please save extensive comments periodically and check your time.

Password Theft - Virus Alert

From: Kathy D Mills <>
Date: Thu, Oct 2, 2014 at 11:12 AM
Subject: RE: Virus Alert
To: Kathy D Mills <>

Dear Webmail User
Virus Alert  Are You the Right Full Owner Of This Email Account? Click Here To Confirm Or It Will Be Shut Down 
Copyright © 2014  Customer Care
©Copyright 2014 Microsoft


Sent: Wednesday, October 01, 2014 9:33 AM

Dear user,

We detect unauthorized Login Attempts into your webmail  from other IP Location. Please verify your identity to update your default IP Address for the safety and integrity of the webmail on Verify now

Verify now 

This is an automated message, please do not reply to this email. If you need additional help, visit our school web page.

Apple Support 
CONFIDENTIALITY: This email (including any attachments) may contain confidential, proprietary and/or privileged information. Any duplication, copying, distribution, dissemination, transmission, disclosure or use in any manner of this email (including any attachments) without the authorisation of the sender is strictly prohibited. If you receive this email (including any attachments) in error, please notify the sender and delete this email (including any attachments) from your system. Thank you.

Password Phishing - IT-service Desk

From: [redacted] <[redacted]>
Date: Tuesday, September 30, 2014
Subject: IT-service Desk
To: "" <>

Your password expires in 4 days Staff and Faculty Click Here to validate your e-mail and password

IT-service Desk

Nigerian 419 scam - CONGRATULATIONS!!!

From: Google Inc <>
Date: Sat, Sep 27, 2014 at 4:33 PM

To: [redacted]

Dear Google User,

We wish to congratulate you for being selected as a winner in the 2014 Electronic Online Sweepstakes, you have been selected for your active use of Google online services.
Kindly, find attached email (PDF File) with further instructions.

Mr. Sergey Mikhaylovich Brin,
Claims Administrator,
Google Inc(UK)

Password theft - Library Account Access

From: [redacted]
Date: Thu, Sep 25, 2014 at 2:08 PM
Subject: Library Account Access

Dear User,

Your access to your library account is expiring soon and it won’t be accessible for you. You must reactivate your account in order to continue to have access to this service. For this purpose, click the web address below or copy and paste it into your web browser. After logging in, your access is reactivated and you will be redirected to your library profile.

If you are not able to login, please contact Library Services Manager at


Library Services Manager
Access and Delivery Services
Estelle and Melvin Gelman Library
George Washington University

The phishing URL redirects to

After the login compromise, it redirects to the legitimate World Library Services Page at

Password theft - HELPDESK TICKET: 390241 (NOT RESOLVED)!

From: White, Craig M. <>
Date: Tue, Aug 26, 2014 at 5:31 AM

Webmail account
Unusual sign-in activity
We detected something unusual about a recent sign-in to your webmail account. To help keep you safe, we required an extra security challenge.
details:
Country/region: Denmark
IP address:
Date: 8/25/2014 10:24 PM (GMT)
If this was you, then you can safely ignore this email.
If you're not sure this was you, a malicious user might have your password. Please click and confirm the link below for re-confirm of your location and we'll help you take corrective action.
Click here & Confirm Location
Thank you for your patience and understanding.
The Outlook account team

Password theft - Alert !!!

From: George Washington University <[redacted]>
Date: Mon, Aug 25, 2014 at 11:29 AM
Subject: Alert !!!

You have 1 new Security Message Reference for your Webmail!

Re-Login to confirm your E-mail status [Click here >] 

This message should only by those who can read it addressed 

and its content is not intended for use by any other person
The George Washington University

Nigerian 419 Scam - Kindly View Attached File Good News Contact Agent Mrs Rebecca Solomon

Date: Wed, Aug 20, 2014 at 10:23 AM
Subject: Kindly View Attached File Good News Contact Agent Mrs Rebecca Solomon

Kindly View Attached File Good News Contact Agent Mrs Rebecca Solomon

Spam - Attn: Somebody just ordered a background-check-on you. See your-results #18008114

From: Notification []
Sent: Thursday, August 14, 2014 10:49 AMTo: Subject: Attn: Somebody just ordered a background-check-on you. Seeyour-results #18008114

==============================================.JSNR PUBLIC ONLINE NOTIFICATION SYSTEMS.==============================================.DT. 8/14/14. NEW ALERT NO. 18008114.
EMAIL-NOTIFICATION FOR:  ==============================================.
This message has reached you today so that we can inform you that someonehas just recently ordered a background-check on you. Please view the detailof this search below now:

Your Search Details:----------------------------Date: 08/13/2014-Time: 11:36 AM.(EST)

Please visit here right away to view your scan results & to view otheradditional information:

JSNR PUBLIC ONLINE NOTIFICATION SYSTEMS.==============================================.DATE: 08/13/2014

======================================================.NEED ANY HELP? CUSTOMER SERVICE INFORMATION:======================================================.Are you in need help or do you have any questions? If so you can simplypress "reply" to this email with your notification numberabove 18008114 & your email will be read at our earliest convenience. Thankyou.

------If you would prefer to put an end to our emailmessages you can go here: you'd prefer to write us: PO.Box Number: 025250 Miami, State: FloridaZIPCODE: 33102-1109631