DHL Deja Vu: Tracking malware continues to hit inboxes

Graham Cluley

Even if you’re 53 years old, you’re probably still like me and get a childlike thrill whenever the doorbell rings and a delivery man hands you a parcel.

And it’s that desire to receive an unexpected package that hackers prey upon when they spam out messages claiming to come from the likes of DHL, FedEx and UPS, having failed to correctly deliver it to your address.

Today we’re seeing a lot of spammed-out email messages in our traps which use precisely this trick.

A typical message (there are slight variations) reads:

Dear customer!

Unfortunately we were not able to deliver postal package which was sent on the 19th of July in time because the addressee’s address is wrong.
Please print out the invoice copy attached and collect the package at our department.

Your DHL Delivery Services.

This isn’t the most sophisticated attack in the world. For instance, if you check the From: header you’ll find that the emails don’t…

Read more in my article on the Naked Security website.

Found this article interesting? Follow Graham Cluley on Twitter to read more of the exclusive content we post.

Graham Cluley is a veteran of the anti-virus industry having worked for a number of security companies since the early 1990s when he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows. Now an independent security analyst, he regularly makes media appearances and is an international public speaker on the topic of computer security, hackers, and online privacy. Follow him on Twitter at @gcluley, or drop him an email.