Beware! DHL Express malware attack appearing in inboxes

Graham Cluley
Graham Cluley
@[email protected]

Doorbell. Image from ShutterstockTake care folks if you’re returning to your inbox today, after a weekend away. A malicious email could be lurking there – waiting to infect your computers.

SophosLabs has intercepted a widespread malware campaign that has been spammed out, disguised as a communication from DHL Express.

The emails have the subject line “Processing complete successfully”, and claim to be a DHL Express Tracking Notification.

The emails look like the following (click on the image for a larger version):

Sign up to our free newsletter.
Security news, advice, and tips.

DHL malicious email. Click for larger version

Attached to each of the emails is a file,, which contains malware that Sophos products detect as Troj/BredoZp-S.

If you unzip the file, and open its contents, you will be putting your Windows computer at risk of infection.

Malicious emails claiming to come from the likes of DHL, FedEx and UPS are nothing new. The reason why we continue to see malware attacks using this kind of disguise though is easy to understand – it works.

Don’t allow yourself, your friends and family to be suckered in by social engineering like this.

Get clued up about security threats by reading sites like Naked Security (you can subscribe to our free newsletter or RSS feed if you like..).

Remember that you should always exercise caution about opening attachments in unsolicited emails.

Doorbell image from Shutterstock.

Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and is the co-host of the popular "Smashing Security" podcast. Follow him on Twitter, Mastodon, Threads, Bluesky, or drop him an email.

What do you think? Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.