We wanted to give you an update on a recent email scam we have been receiving reports of so you can be on the lookout.
While this is an old technique we are seeing a big resurgence of this in the last week or so. Doing some poking around we found that Cisco Security has detected a major uptick in these types of fraudulent emails since February 13, 2015 (just in time for stressed husbands expecting last minute flower deliveries perhaps?)
The gist of it is this; you will receive an email that appears to be in reference to a shipping notification – they have been reported from DHL, FedEx, and UPS. These emails are usually quite vague; either stating that you have a packing at their arrival facility and to click for more information or to download an attachment.
When you do however, it downloads malware onto your computer – leaving all of your information vulnerable. Some have even gone further; stating that a small payment needs to be made in order to release your package inviting people to pay online and then stealing their payment information.
This email, at first glance, may appear to be legitimate because it does come from a proper looking email address and bears all of their proper logos, colors, and branding. Please consider the following steps before clicking in an email;
- Is the information incredibly vague? – Tracking emails should only have information recognizable to you – tracking number for an order you placed, your name, where it’s shipping from and where it’s headed.
- Is it requesting personal or payment information? DHL, FedEx, and UPS have all stated that they will never contact your for this information via an unsolicited email. If it’s really coming from the source – they will already have that information!
- Is it trying to redirect you to a misspelled website? I.e. Fedx.com or Fed-ex.com?
Here’s the bottom line; if you haven’t shipped or ordered anything, they shouldn’t have your email address. Do not give personal or payment information out via email.
If you are a customer of ours and you do receive one of these emails – forward it to our help desk engineers at email@example.com immediately so they can begin taking the proper steps to protect you and your company.
Read the official statements here:
See more information on this matter from Cisco Security here.
If you have any questions about this matter, please email them to firstname.lastname@example.org.