Monday, March 19, 2012

FedEx Spam Delivers Nasty Trojan

What’s this? Another FedEx email stating that a package was sent to me and in order to view additional information (including the tracking number) I must download the file attached to the email?

That sounds safe, right? …Wrong!

Despite malware-infested FedEx spam quickly becoming the oldest trick in the book, cybercriminals are still hell-bent on pumping it out and keeping their fingers crossed that maybe, just maybe, someone will fall for their trap and infect their computer with whatever malware they’re pushing.

It’s more than likely that someone somewhere WILL fall for these fraudulent emails – why else would spammers continue to send them? There’s a good chance that one of the recipients is actually waiting on a delivery via FedEx.

With that being said, if you see an email similar to this one arrive in your inbox, feel free to delete it without downloading the attached file:

FedEx Spam
Subject: Parcel notification 425207
From: FedEx Service (infob@fedex.com)

FedEx ®

Dear customer.

The parcel was sent your home address.
And it will arrive within 7 business day.

More information and the tracking number are attached in document below.

Thank you.

Copyright © FedEx 1995-2012

Attached to the email is a file named, “FedEx document.zip,“ which contains Trojan-Downloader.Win32.Anedl.g – which is a Trojan horse that is not to be trifled with.

Once Trojan-Downloader.Win32.Anedl.g infects your machine, it will download and install additional programs [/malware] and files onto your PC, inject malicious code into existing applications and system processes (making it difficult to remove) and modify numerous registry keys.

Therefore, if you receive a copy of this FedEx spam email, it’s recommended that you:

  • Avoid downloading or opening any attached files.

  • Delete the email immediately.


Don’t miss out on the latest tech news and computer security alerts! Follow us on Twitter at @hyphenet,  “Like” us on Facebook or add us to your circle on Google+.

No comments:

Post a Comment