Tuesday, December 6, 2011

USPS Spam Spreading Malware (Take 2!)

USPS SpamChances are you’ve received some sort of email claiming to be from the United States Postal Service, urging you to download and open an attached file, which they claim to be some sort of shipping label.

If you haven’t received the spam alerting you of a failed delivery for a package you allegedly sent to someone else, then perhaps you’ve received its evil cousin saying they were unable to deliver the parcel to you:
Subject: USPS Invoice copy NO#4119
From: Postal Service (help@usps[dot]com)
To: [your email]
BCC: [multiple recipients]

Hello,

Your parcel has arrived at the post office on November 16.
Our Driver was unable to deliver the parcel to your address.
To receive a parcel you must go to the nearest USPS office and show your post label.
The post label is attached to this letter.

Thank you for your attention.
USPS Logistics Services.

Attached to the email is a file named “Post_Label_N0736US.zip” which the spammer hopes those who are expecting holiday gifts from their distant loved ones will open, unleashing the malware tucked inside.

If you receive an email similar to the one outlined above, it’s recommended that you avoid downloading any file attachments and refrain from clicking any links (if included).

With the holiday season upon us, cybercriminals are doing their best to spoof delivery emails in order to spread malware and steal personal information.

Keep your computer safe and secure by running up-to-date antivirus software and exercising caution when sifting through your email inbox.

Don't forget to follow us on Twitter at @hyphenet or “Like” us on Facebook to stay up-to-date on the latest tech news & PC security threats.

No comments:

Post a Comment