Saturday, March 26, 2011

Warning! Take Heed!

Fake USPS Emails in Circulation posted on Softpedia by Lucian Constantin. “A wave of fake United States Postal Service (USPS) emails currently making the rounds are trying to pass a trojan downloader for a shipping label.”

The spam emails pose as failed delivery notifications and bear a subject of  “Post Express Information. Your package is available for pick up.”

The contained message claimed that an error in the shipping address caused the package to be returned to the post office, from where it can be retrieved.

“Your package has been returned to the Post Express office. The reason of the return is ‘Error in the delivery address’ Important message!

“Attached to the letter mailing label contains the details of the package delivery. You have to print mailing label, and come in the Post Express office in order to receive the packages” the emails read.

The attachment is called Post_Express_Label_ID_[number].zip and contains a malicious executable of the same name.

My personal advice continues to be the same: Avoid clicking on links in the email message. Instead, type in the address by hand in your browser to go to the page and see what's up.