Malicious Spammers Deliver Fake UPS invoices


Malicious Spammers Deliver Fake UPS invoices

Parth Vyas

Malicious spammers are sending fake UPS (United Parcel Services) invoices to unsuspecting recipients forcing them to downloading malicious components from the web.

The e-mail suggests that UPS could not deliver a package supposedly sent to a wrong address. It asks the recipient to print an invoice and go to a UPS office to collect the package, said security experts Marshal.

Phil Hay lead threat analyst for Marshal's Trace team said, "For the unwary or uninitiated, the message appears to come from UPS."

When this attachment is opened, a program installs which allows downloading of more malicious content. This opens up a seemingly innocent Microsoft Word icon which is actually is a Zip file which hides the malicious files from the e-mail filters.

"The message itself is full of mistakes and poor grammar which gives away its authenticity. The subject also misspells the word 'packet' and the message provides no contact addresses," added Hay.

Malicious spam triples in a week >>

Email Alerts

Register now to receive IT-related news, guides and more, delivered to your inbox.
By submitting your personal information, you agree to receive emails regarding relevant products and special offers from TechTarget and its partners. You also agree that your personal information may be transferred and processed in the United States, and that you have read and agree to the Terms of Use and the Privacy Policy.

COMMENTS powered by Disqus  //  Commenting policy