Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Virus Email - UPS Delivery Notification Tracking Number

14
14
36.4K
1

Feb 7, 2013 2013-02-07T09:43:28-05:00
Oct 27, 2014 2014-10-27T08:56:05-05:00

Online Threat Alerts (OTA)

Virus Email - UPS Delivery Notification Tracking Number

If you receive an e-mail message claiming to be from United Parcel Service (UPS) with the subject "UPS Delivery Notification Tracking Number", please do not open the attachment. The attachment is a virus/spyware called Mal/JSRedir-J and appears to have been sent from auto-notify@ups.com. But, the malicious e-mail message was not sent by UPS.

Advertisements - Continue reading below

The name of the malicious attachment is nvoiceEVKDBQXRTKRXN4CTMI.html. This file name may change.

The aim of the persons behind this malicious e-mail message is, to trick their victims into opening the malicious attachment so that their computers can become infected with the virus/spyware Mal/JSRedir-J.

Here is a copy of the UPS virus e-mail message

From: UPS Quantum View <auto-notify@ups.com>
Subject: UPS Delivery Notification Tracking Number:EVKDBQXRTKRXN4CTMI
You have attached the invoice for your package delivery.
Thank you,
United Parcel Service
*** This is an automatically generated email, please do not reply ***

If your computer is infected with this virus/spyware, you can remove it using Sophos free virus removal tool. Click here to download.

Check the comment section below for additional information, share what you know, or ask a question about this article by leaving a comment below.

Write comment or view the ones below. +

Save

Was this article helpful?

Advertisements - Continue reading below

Comments, Answers, Reviews or Questions

To protect your privacy, please remove sensitive or identifiable information from your post. Your IP address will be used to display your estimated location.

Comments 14

Mar 5, 2015 at 2:16 AM by an anonymous user from: Vienna, Austria

Seems it isn't active again now. Got several on my Company address that was sent by auto-notify-ups.com

Jun 3, 2015 at 6:05 AM by an anonymous user from: Darmstadt, Hesse, Germany

Received this mail today in Germany.

Feb 28, 2015 at 3:10 AM by an anonymous user from: Cologne, North Rhine-Westphalia, Germany

Received this mail from "ups quantum view" the real mailadress was "dijob-dijob .hr". Deleted the mail - guess it was a scam.

Feb 28, 2015 at 5:14 AM by info

Yes, it is a scam.

Oct 27, 2014 at 6:05 AM by an anonymous user from: Ashburn, Virginia, United States

How does this virus affect a Kindle Fire if this email virus is opened?

Oct 27, 2014 at 9:00 AM by info

We cannot tell, because the malicious JavaScript will check your device for vulnerabilities, and if there is any, will redirect you to a malicious website that can take advantage of it.

So, it is recommended not to open the attachment.

Advertisements - Continue reading below