Online Threat Alerts (OTA)
An anti-cybercrime community alerting the public.

Canada Post Virus Email - "Scheduled Package Delivery Failed"

The email message below: " Scheduled package delivery failed / 27 feb 2014", has links to files with a malicious computer program called a Trojan horse and a security exploit, that will infect your Windows computer with malware if you open them. The message was created by cybercriminals to trick the recipients into clicking on the links.

Advertisements

The Virus Email - Scheduled Package Delivery Failed

Subject: Scheduled package delivery failed / 27 feb 2014
Dear customer,
We attempted to deliver your item on February 27, 2014 , 05:30 PM. The delivery attempt failed because nobody was present at the shipping address, so this notification has been automatically sent.

You may arrange redelivery by visiting the nearest Canada Post office with the printed shipping inboice mentioned below.

If the package is not scheduled for redelivery or picked up within 48 hours, it will be returned to the sender.

TRACKING Number: MW421330771CA
Expected Delivery Date: February 27, 2014
Class: Package Services
Service(s): Delivery Confirmation
Status: eNotification sent

An electronic copy of the shipping invoice can be downloaded from our website , in :
PDF format :
DOC format:
Thank you,
© 2014 Canada Post Corporation
---------

This email message is disguised as a message from the Canada Post, which claims that the recipients should download an electronic copy of an invoice, by clicking on the links within it, because attempts to deliver their items failed.

But, this message is a fake and the links in it go to two files containing a Trojan horse and a security exploit.

Here are the links:

The link: "annoying-client.com/pdf_trk_MW421330771CA.zip", in this fake and virus email message will take you to the malicious or compromised website www.annoying-client.com, which will download a malicious zip file containing malicious computer program called a Trojan horse.

While this link: “annoying-client.com/traking_doc_MW421330771CA.doc”, contains an exploit called “Sophos verdict: Exp/20120158-A”. This exploit can lead to your computer getting infected with different viruses and Trojan horses.

Once your computer has become infected with one of the malicious viruses or Trojan horses, the cybercriminals behind this email message will be able to access and take control of your computer remotely from anywhere around the world. They may spy on you, use your computer to commit cybercrimes, or steal your personal and financial information.

Now, if you have already opened any of the malicious email attachments, please do a full scan of your computer with the antivirus software installed on it.

If you don’t have antivirus software installed on your computer, please click here for a list of free antivirus software.

Never open an attachment that has a name ending with “.exe”, because these are computer programs that can infect your computer with a virus or some other malware.

Click here for a list of email attachments you should never open, regardless of where they came from.

This virus email similar to the following:
You Have Received a Tax Refund Payment of 632.25GBP

Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.

Note: Some of the information in samples on this website may have been impersonated or spoofed.

Share this article with others.
Advertisements
Write / View Comments (0)
View on Online Threat Alerts (OTA)
Help Maintain Online Threat Alerts (OTA)