Emails purporting to be from delivery company FedEx claims that a package en route to the recipient has been returned due to an addressing error and that he or she must open an attached file or follow a link to print a mailing label in order to receive the package.
The emails are not from FedEx. The claim that a package has been returned is a lie designed to trick recipients into opening the attached file or following a link. Attachment contains malware. Links in the messages open compromised websites that also contain malware.
Detailed analysis and references below example.
Last updated: January 25, 2013
First published: 12th November 2010
Article written by Brett M. Christensen
About Brett Christensen and Hoax-Slayer
Subject: Number (C)BCD71 911 230 0817 4270
Order Date: Thursday, 17 January 2013, 11:10 AM
Your parcel has arrived at the post office at January 18.Our courier was unable to deliver the parcel to you.
To receive your parcel, please, go to the nearest office and show this receipt.
GET & PRINT RECEIPT
Best Regards, The FedEx Team.
Our company’s courier
Hoax-Slayer – New Articles