UPS 'Parcel Has Been Found' Malware Email
Email purporting to be from UPS claims that a parcel lost in the Christmas rush has now been found and sent. The email contains a link that supposedly opens a shipment label for the parcel.
© Depositphotos.com/Maxim Bukovski
The email is not from UPS and the supposed parcel does not exist. Clicking the "shipment label" link opens a compromised website
that harbours malware.
Subject: Parcel Has Been Found
Due to the Christmas time postal service overloading some postal items were lost.
Your parcel has been found and sent.
This email, which claims to be from US based delivery company United Parcel Service (UPS), informs recipients that a parcel lost in the Christmas postal rush has now been found and sent on its way. The message includes a link that supposedly allows recipients to access a "Shipment Label" for the lost parcel.
However, the email is not from UPS and the promised parcel does not exist.
Those who fall for the trick and click the "Shipment Label" link will be taken to a compromised website that harbours malware
. Once downloaded and installed, the malware can download
further malware and allow Internet criminals to take control of the infected computer.
This message is a variant of a long line of
malware emails claiming to be from UPS
or other delivery companies
. Many versions claim that a parcel was unable to be delivered and ask recipients to click a link or open an attached file to print a postage invoice or shipping label. Some versions link to websites containing malware while others include the malware in an attached file.
If you receive one of these messages, do not click on any links or open any attachments that it contains.
Last updated: June 7, 2013
First published: June 7, 2013
By Brett M. Christensen