Outbreak: United Parcel Service notification malware attack

by Carol~ Moderator - 2/4/11 10:24 AM

In Reply to: NEWS - February 04, 2011 by Carol~ Moderator

Cybercriminals are attempting to infect computers around the world, disguising their attack as an email claiming to come from United Parcel Service about a parcel delivery.

But this time they're not using words, they're using an embedded image to trick you into clicking on the link.

Here's what a typical malicious email being used in this malware campaign looks like: [Screenshot]

Subject: United Parcel Service notification #<random number>

Attached file: USPS_Document.zip

Message body:
Dear customer.

The parcel was sent to your home address.
And it will arrive within 3 business days.

More information and the tracking number are attached in the document below.

Thank you.
United Parcel Service.

Copyright (c) 1994-2011 United Parcel Service of America, Inc. All rights reserved.

As you can see - it looks pretty professional. Which may well fool more people into believing it is genuine.

Continued : http://nakedsecurity.sophos.com/2011/02/04/outbreak-united-parcel-service-notification-malware-attack-spammed-out/