Crafty spam email

[AZRedhawk44]

Got a neat new kind of spam/malware email today.

Obviously didn't open the attachment.


Text of it:

DHL Express Tracking Notification: Thu, 1 Dec 2011 16:19:14 +0100



--------------------------------------------------------------------------------


Custom. Reference: 5C2S8-7924949155179868
P. Tracking Number: 1604-1KVAPIHGQ
Pickup Date: Thu, 1 Dec 2011 16:19:14 +0100
Service: GROUND
Pieces: 2


--------------------------------------------------------------------------------
 
 



Thu, 1 Dec 2011 16:19:14 +0100 - Clearance processing complete
PLEASE REFER TO ATTACHED FILE FOR DETAILED INFORMATION.


--------------------------------------------------------------------------------






--------------------------------------------------------------------------------
Shipment status may also be obtained from our Internet site in USA under http://track.dhl-usa.com or Globally under http://www.dhl.com/track
Please do not reply to this email. This is an automated application used only for sending proactive notifications



Thanks,
DHL Express International.

Header info even appears to come from "noreply@dhl.com."

However the email is sent to a bunch of generic hotmail addresses, one of them being mine.  with a ZIP file attachment. 

Obviously no way that DHL is going to send the same tracking data to several different hotmail users for the same package.  Manually going to DHL's website and querying for the package tracking number shows no package.  I do have a package I'm expecting today, but it's supposed to come USPS, not DHL.

Just strikes me as a bit more crafty than most of 'em.

[Jamisjockey]

My MIL got one of the "Wells fargo bank, we need your login information" emails.  We were both in the office working and she leans over and asks if we have Wells Fargo.  *expletive deleted*ck its like dealing with an 8 year old some times..... 

[41magsnub]

Spammers are getting better at it, using actual English speakers for the writing even!  I had one the other day purporting to be about a compromised Wells Fargo account that was so well done I kind of believed it but was not dumb enough to click on the link.  No bank would just send an email regarding something like this so I knew it was phishing but it was still very believable.  I called the bank to make sure my account had not been compromised.

[lee n. field]

Got a neat new kind of spam/malware email today.

Obviously didn't open the attachment.


Text of it:

Header info even appears to come from "noreply@dhl.com."

However the email is sent to a bunch of generic hotmail addresses, one of them being mine.  with a ZIP file attachment.  

Obviously no way that DHL is going to send the same tracking data to several different hotmail users for the same package.  Manually going to DHL's website and querying for the package tracking number shows no package.  I do have a package I'm expecting today, but it's supposed to come USPS, not DHL.

Just strikes me as a bit more crafty than most of 'em.

La Esposa got something very similar, that she wanted my help with.  From "USPS", supposedly a notice of misdelivery that she was supposed to print out and take to the post office.   Mhh-hmmm.  With a zip payload*, and cc-ed to a long list of random addresses.  Yahoo webmail flagged it as a virus.

*She's running on an Ubuntu box, so nothing would have happened, if she had managed to get past the AV and download it.

[HankB]

I've gotten emails purporting to be from UPS that include an attachment for "package delivery information" or something of the sort - needless to say, I don't click on the attachment.

I DID get a nifty note last week from Google South Africa (not Nigeria - this was ostensibly from South Africa) that in honor of Google's 11th birthday I was selected to receive 1.5 million British pounds as part of their international birthday celebration.