'UPS' trojan spam

[roquefort]

"Hello!

 

We failed to deliver your postal package you have sent on the 4th of January in time

because the recipient’s address is not correct.

Please print out the invoice copy attached and collect the package at our department.

 

United Parcel Service of America.""

 

 

This has been around a while, but I just got one, so it's still doing the rounds. It has an attachment that almost certainly contains a malware bomb in the form of a trojan keylogger. Just delete it if you get one.

[SillyKristy]

After having dealt with the situation described in the fake email, I can tell you how it really works. If UPS can't deliver a package due to incorrect address information, they send a post card to the intended recipient and wait for their response. If no response is received in a week, the package is returned to the sender. This assumes that the sender doesn't track the package, become aware of the issue, and take steps to ensure that the address error is corrected, in which case the sender gets the runaround from several front-line lackeys until finally talking to someone competent and getting the error corrected and the package delivered a week late.