14 DAY TRIAL // Experts have issued an alert to warn users about bogus “Parcel has been found” notifications apparently coming from US-based delivery company United Parcel Service, or UPS.
According to Hoax Slayer, the emails read something like this: “Dear Client, Due to the Christmas time postal service overloading some postal items were lost. Your parcel has been found and sent. Shipment Label”
The link that hides behind the “Shipment label” doesn’t point to a legitimate UPS site, but to a compromised website that’s set up to push malware onto visitors’ computers.
A similar spam campaign has been spotted by Conrad Longmore of Dynamoo’s Blog. Longmore has identified bogus emails purporting to come from USPS, but instead of links to malware sites, the ones he found have a malicious executable file attached to them.
Once executed, the malware – which is currently identified by only 18 antiviruses – tries to download additional malicious components onto the infected system.