FedEx Scam completes the package trifecta

Like the DHL scam mentioned yesterday, this is technically not phishing, but email with malware attached; the purpose of the malware is to steal your personal information.

Remember, the safest thing to do to check on a package delivery is to go to the vendor’s legitimate Web site and check the status there. With this FedEx scam, most of us at UD will find the infected attachment blocked from our email, as shown below.


From: 	FedEx Customer Service 
Subject: 	Error in the delivery address No67072540
Date: 	October 28, 2011 10:02:22 AM EDT
To: 	______@udel.edu

WARNING!!! (from md10.nss.udel.edu)

The following message attachments were flagged by the antivirus scanner:

Attachment [2.2] Post_Document_#0874.zip, virus infected: Mal/EncPk-AAT,Troj/BredoZp-GH.  
Action taken: deleted

Dear customer,

Your parcel has arrived at the post office on October 14.
Our Driver was unable to deliver the parcel to your address.
Please print out the invoice copy attached and collect the package at our office.

Thank you,
FedEx Global Mail.

VIRUS WARNING Message (from md10.nss.udel.edu)

The virus Mal/EncPk-AAT,Troj/BredoZp-GH was detected in email attachment [2.2] 
Post_Document_#0874.zip.  The infected attachment has been deleted.

Just delete it.

Richard Gordon