« Post-Christmas Malware Lure | Main | The 419-Parcel Connection »

January 01, 2012

It's an oldie, but a goodie: The email message arriving from a delivery service (UPS, USPS, Fedex, DHL) claiming that they have a package for/from you that needs to be picked up. In order to pickup the parcel, you must print out the form/label attached/linked to the message. Here's one that arrived today:

From: Postal Service <support@usps.com>
Subject: USPS service. Get your parcel NO#2517

Dear customer,

Your parcel has arrived at the post office on December 5.
We were not able to deliver your package to your address.
To receive a parcel you should go to the nearest USPS office and show your post label.
The post label is attached to this letter.

Thank you for your attention.
USPS Customer Services.

[Attached File: Post_Label_N1976US.zip]

Problem is, the attached file or the page at the end of the link destination can rip open an unprotected PC faster than a 5 year old kid tearing through wrapping paper on Christmas morning.

That's one way to get your New Year off to a crappy start.