Warning: New phishing email out there!

Phishing email posing as a UPS notification

Watch out for an email posing as a notification from UPS or FedEx. DO NOT CLICK THE ATTACHMENT!  The email is sent from the spoofed address “United Parcel Service <****@ups.com>” where *** is filled in with various combinations like:

infojs@

joiner2@

joiner22@

joisupport@ups.com

supportadm@ups.com

….

The message has the following body:

Dear customer.

The parcel was sent your home address.

And it will arrive within 7 business day.

More information and the tracking number are attached in document below.

Thank you.

© 1994-2011 United Parcel Service of America, Inc.

The attached ZIP file has the name UPSnotice.rar and contains the 16 kB large file UPS notify.exe.

The Trojan Horse is known as BDS/Hostil.F.9 (Antivir), TrojanDownloader:Win32/Chepvil.I (Microsoft), Mal/Bredo-K (Sophos), Backdoor.Cycbot (Symantec)

TIPS:

•UPS would always use your name if they were emailing you

•UPS would always send from a UPS email address

•UPS would always include their company details on the email

             •UPS would never send you a .dat file to open

Virus alert

There is a virus circulating with the title "UPS/FedEx Delivery Failure" in the Subject Line. You can receive a FAKE email from "UPS/FedEx Customer Service" along with an airbill number. It will say that they were un-able to deliver a package sent to you on such and such a date. It then asks you to print out the attached invoice copy and take it to their offices for pick-up. DON'T ... IT LAUNCHES THE VIRUS - Delete the e-mail immediately. This one is a good warning and is verified on the real FedEx, UPS and Snopes web sites. Please never forward a message like this until you have personally verified it.

http://fedex.com/us/fraud/virusalert.html

"Be alert for fraudulent e-mails claiming to be from FedEx regarding a package that could not be delivered. These e-mails ask the receiver to open an attachment in order to obtain the airbill or invoice for picking up the package. The attachment contained in this type of e-mail activates a virus. DO NOT OPEN the attachment. Instead, delete the e-mail immediately."

http://www.ups.com/content/us/en/about/news/service_updates/virus_us.html

"We have become aware there is a fraudulent e-mail being sent that says it is coming from UPS and leads the reader to believe that a UPS shipment could not be delivered. The reader is advised to open an attachment reportedly containing a waybill for the shipment to be picked up."

"This e-mail attachment contains a virus. We recommend that you do not open the attachment, but delete the e-mail immediately."

http://www.snopes.com/computer/virus/ups.asp

Thanks to our friend Stan Coggins.

Phishing alert

I just received the following email. If you get a copy, do not click on the hyperlink! Just forward the entire message to the IRS at phishing@irs.gov.

"After the last annual calculations of your fiscal activity we have determined that you are eligible to receive a tax refund of $189.60. Please submit the tax refund request and allow us 6-9 days in order to process it. It will be stored in our secure database for maximum of 3 days while we process the results of this nationwide survey.

A refund can be delayed for a variety of reasons. For example submitting invalid records or applying after the deadline.

To access your tax refund online, please click on the link below

Click here

Thank you,
© Copyright 2007, Department of the Treasury U.S.A. All rights reserved"

Scam alert: watch out for IRS phishing

Leslie McFadden of Bankrate.com sends the following:

If you receive an unsolicited call or e-mail from the Internal Revenue Service, watch out. You're not talking to Uncle Sam.

The IRS recently issued a warning about identity theft schemes using the agency's name.

Since 2006, the Internet Crime Complaint Center has received more than 200 complaints about phishing schemes using the bureau as bait. This year scammers are using new twists on old tricks, including personalized e-mail salutations, live phone calls and the promise of tax rebates, to dupe consumers into divulging sensitive information.

Watch the following message: