Fake DHL Emails Distribute New Trojan


Recommended Posts

Fake DHL Emails Distribute New Trojan

Masquerade as failed delivery notifications

Security researchers from antivirus vendor Avira warn that a new spam campaign masquerades as notifications DHL. The fake emails have a new computer trojan variant hidden in their attachments.

The messages have their "From" field spoofed to appear as originating from an DHL email address. The subject is "DHL Tracking Number ########" (where # stands for a random letter or digit) and unlike most spam, the content of these emails is relatively well spelled.

"Hello! The courier company was not able to deliver your parcel by your address. You may pickup the parcel at our post office personaly. The shipping label is attached to this email. Please print this label to get this package at our post office. Thank you for your attention," the emails signed by DHL Delivery Services, read.

The attached archives are called DHL_INVOICE23.zip and contain a trojan installer. "The file in the ZIP archive uses a double file extension in the form of DHL_INVOICE_23.xls______________<plenty of underscores>______.exe," the Avira researchers explain. This naming scheme as well as the file Excel document icon, have the purpose of deceiving the users into believing that they are actually opening a document.

More details - http://news.softpedi...an-146649.shtml

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...