myITforum.com Community Forum myITforum.com Community Forum

Home  Forums  Blogs  Live Support chat  Search Articles  Wiki  FAQ  Email Lists  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Photo Gallery  Member List  Search  Calendars  FAQ  Ticket List  Log Out

All Forums RSS Feed Subscription:


  


More UPS Invoice E-Mails with Infected Attachment

 
View related threads: (in this forum | in all forums)

Logged in as: Guest
  Printable Version
All Forums >> [Security, AntiVirus, and Patching] >> Breaking Virus & Security News >> More UPS Invoice E-Mails with Infected Attachment Page: [1]
Login
Message << Older Topic   Newer Topic >>
More UPS Invoice E-Mails with Infected Attachment - 9/17/2008 4:17:52 PM   
awenlock


Posts: 352
Score: 186
Joined: 3/8/2005
Status: offline
It seems that the UPS invoice tracking e-mails have re-surfaced again.  Reports on the ISC website have details of an example e-mail:

quote:


Email header:

To: victims@email.address
Subject: Re: missing package
From: John Henry <johnhenry.support@ups.com>
Reply-To: johnhenry.support@ups.com

Email body:

Mr./Mrs. Victims First and Last name

I am sorry for this late reply, but we have good news.

We managed to track your package, and we have attached the
invoice you asked for to this reply.

The invoice contains the correct tracking# , since the one
you gave us was invalid.

You can use it on the ups website to track your shipment.

Thank you
John Henry
UPS Customer Care Department


From: victim’s name and email address
Subject: missing package
To: support@ups.com
Date: Monday, September 8 , 2008, 10:38 AM

I have recently used UPS to send a package to my cousin but
he never received it.

Also , the tracking number doesn't check on the website, and
I lost the invoice.

Can you forward me a copy?



Here you have the tracking# : 03073332100016836200


It seems that the attachment name is invoice.zip.

As with any new virus the detection is slowly catching up.  At the time of the article on ISC only 9 Virus products out of 36 detected the virus but I'm sure this will have improved by now as more vendors put detection into their virus updates.

Certainly one to keep an eye on and make your users are aware.   


Links:
ISC: http://isc.sans.org/diary.html?storyid=5051


Regards
Alan
Post #: 1
Page:   [1]
All Forums >> [Security, AntiVirus, and Patching] >> Breaking Virus & Security News >> More UPS Invoice E-Mails with Infected Attachment Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts



  
Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 ANSI

0.234