The courier company was not able to deliver your parcel by your address.
Cause: Error in shipping address.You may pickup the parcel at our post office personaly!...The shipping label is attached to this e-mail.Please print this label to get this package at our post office....
The message purports to be from DHL and sports a convincingly spoofed "dhl.com" e-mail address.
The attachment is called "DHL_Label_NR34791.zip," and that's the real tip-off.
Well, that and the fact that I'm not expecting anything to be delivered by anyone.
Even if I were, why would a simple shipping label be in a zip file?
It wouldn't. It would be a pdf, surely. Or I'd be instructed to log into dhl.com with my tracking number.
This attachment and others like it -- the numbers appear to be randomly generated (yes, I got 2 of them with different numbers) -- contains a trojan that will install malware on your Windows computer. But even if you have a Mac, you should not open unexpected attachments from unverifiable sources.
For more on Bredolab, see Hoax-Slayer and Symantec.
No comments:
Post a Comment