There is a significant wave of malicious emails being spammed out presently, posing as notification messages from DHL.
If you make the mistake of opening the attached ZIP file you will be putting your computer at risk of infection by a Trojan horse.
There’s nothing new, of course, about cybercriminals disguising their attacks as notifications from DHL.
This attack, though, is particularly aggressive and – as you can see in the examples below – uses a variety of different DHL-related subject lines, attachment names and message bodies:
HELLO!
Dear Client, Recipient's address is wrong
Print out the invoice copy attached and collect the package at our department
Best wishes , DHL Customer Services
ATTENTION!
DEAR CLIENT , We were not able to deliver the postal packagePlease print out the invoice copy attached and collect the package at our department
Pack it. Ship ip. No calculating, Your DHL .com Customer Services
Good afternoon!
DEAR CUSTOMER, Recipient's address is wrong
PLEASE PRINT OUT THE INVOICE COPY ATTACHED AND COLLECT THE PACKAGE AT OUR DEPARTMENTPack it. Ship ip. No calculating, Your DHL .com Customer Services
Good afternoon!
Dear User , Delivery Confirmation: FAILED
Please print out the invoice copy attached and collect the package at our department
With respect to you, DHL Team
Here are just some of the different disguises we saw in a snapshot of less than one minute in a small selection of our spam traps:
Sophos products intercept the attack, detecting the ZIP file as Troj/Invo-Zip and the Trojan horse contained within as Mac/EncPk-NS.
Dangerous emails claiming to come from courier companies are nothing new – it has become one of the most commonly-used methods by which hackers socially engineer unsuspecting users into opening a malicious attachment or clicking on a dangerous link.
Make sure that you and your friends are wise to the trick – and think before you click.
