"Post Express Service! Package is available for pickup! NR0534"
Have you received an email from "Post Express", telling you that "Post Express Service! Package is available for pickup! NR0534"; with an attachment, saying "Attached to the letter mailing label contains the details of the package delivery. You have to print mailing label, and come in the Post Express office in order to receive the packages"
It is a scam and malware. If you click to open the attached file (typically, it is a zip file), you will open a virus or other malware. One report states that Sophos detected the ZIP file as Troj/BredoZp-BT and the enclosed malware as Troj/Spyeye-R.
Opening the attached file can install a trojan on the user's computer. Once installed, the trojan can send information to malicious servers and may download other malware.
The returned or failed package delivery scam has been used many times as a means of distributing malware. Another version if this scam claimed that a package being delivered by United Parcel Service (UPS) had not been delivered due to addressing problems. Another version claimed that the returned package was sent by FedEx. In both versions, an attachment to the emails that supposedly contained a mailing label, actually contained malware.
The scammers rely on the fact that many recipients may open the attachment out of simple curiosity or concern. You should always be very cautious of any unsolicited emails that claim that a package delivery has failed or been returned. No legitimate delivery company will send notice of a failed delivery via an unsolicited email. Especially not with an attachment.
Sample Scam and Malware: Post Express Email
February 14, 2011, CFR received the following email:
This is a post notification
Email notification ID 30784166
Your package has been returned to the Post Express office.
The reason of the return is "Error in the delivery address"
Attached to the letter mailing label contains the details of the package delivery.
You have to print mailing label, and come in the Post Express office in order to receive the packages.
Thank you for your attention.
Recommendations- What to do:
- Only open email or IM attachments that come from a trusted source and that are expected
- Use an anti-virus/anti-spam package (we recommend Norton 360 or Norton Internet Security scan all attachments prior to opening. Click here to see Norton 360 2013 on Amazon.com .
- Delete the messages without opening any attachments
- Do not click on links in emails that come from people you do not know and trust, even if it looks like it comes from a company you know.
- Keep your anti-virus software up to date
- Keep your operating system up to date with current security patches. Click here for an article that describes how to do this.
And please let us know about any suspicious calls or emails you receive. We look for patterns so that we can alert the authorities and victims to new scams, before it is too late!