FedEx Incorrect Delivery Address Malware Email

Outline
Emails purporting to be from delivery company FedEx claims that a package en route to the recipient has been returned due to an addressing error and that he or she must open an attached file or follow a link to print a mailing label in order to receive the package.

Brief Analysis
The emails are not from FedEx. The claim that a package has been returned is a lie designed to trick recipients into opening the attached file or following a link. Attachment contains malware. Links in the messages open compromised websites that also contain malware.

Detailed analysis and references below example.

Last updated: January 25, 2013
First published: 12th November 2010
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer

Examples