Post by: Al on October 04, 2010, 02:56:17 PM
I received today in my spam box of my Yahoo mail a nondelivery notice from the USPS (spoof ofcourse) with 2 attachments.
As I found it very suspicious, I scanned it with ClamXAV and it detected that it was in fact a trojan virus! The payload (USPSlabel.zip) is a zip file with an executable file inside. (LABEL_USPSXLS.exe)
This is my very first virus of this fashion through my email. SPOOKY!
Just wanted to post this to warn you good people of this.
Post by: Xairbusdriver on October 04, 2010, 05:16:22 PM
To make a long story short, I noticed it did not have Judy's name on it. And the "tracking number was way too short, FedEx tracking numbers are 21 characters long! Nor could FedEx see anything in their records coming our way! I finally called the company sending the box and got the correct number which said it was at the Post Office. It was eerie that the email came the same day that the box was delivered to the USPS.
A connection there? USPS servers hacked?Also strange was that I saw a FedEx Ground truck driving up our dead-end street the same day the message came. So I thought there actually was a delivery attempt! But the service being used is not handled by FedEx all the way, it is simply delivered to the normal Post Office for final transportation. FedEx is doing their part to keep the USPS in business!
Post by: gunug on October 05, 2010, 01:05:49 PM
Post by: tacit on October 05, 2010, 02:22:16 PM
QUOTE(Al @ Oct 4 2010, 07:56 PM) <{POST_SNAPBACK}>
Just an FYI for you all.
I received today in my spam box of my Yahoo mail a nondelivery notice from the USPS (spoof ofcourse) with 2 attachments.
As I found it very suspicious, I scanned it with ClamXAV and it detected that it was in fact a trojan virus! The payload (USPSlabel.zip) is a zip file with an executable file inside. (LABEL_USPSXLS.exe)
This is my very first virus of this fashion through my email. SPOOKY!
Just wanted to post this to warn you good people of this.
I received today in my spam box of my Yahoo mail a nondelivery notice from the USPS (spoof ofcourse) with 2 attachments.
As I found it very suspicious, I scanned it with ClamXAV and it detected that it was in fact a trojan virus! The payload (USPSlabel.zip) is a zip file with an executable file inside. (LABEL_USPSXLS.exe)
This is my very first virus of this fashion through my email. SPOOKY!
Just wanted to post this to warn you good people of this.
That one's been making the rounds for quite a while. I have been getting about fifteen copies of that particular malware a day on one of my email addresses.
Post by: Xairbusdriver on October 05, 2010, 02:32:34 PM
I'm sure a small outfit like the USPS would be fully aware of any involvement of its employees in something like this. Sure they would. And it would be too obvious if that's where these things were initiated, anyway... Right! Fortunately, it was only my wife's addy that was associated!!! 
BTW, ClamX AV did find it to be a trojan. Supports tacit's info about it being around for some time.
Post by: Paddy on October 05, 2010, 04:09:23 PM
Trojans hiding in emails purporting to be from UPS, FedEx and now the USPS have been around for over 2 years now. Some of them have quite comical wording, as per most phishing attacks generated by non-native English speakers.
http://www.pc1news.com/news/0055/a-new-tro...l-messages.html
There was quite a spate of them from UPS fairly recently. The USPS one is a fairly new one, methinks. At any rate, NONE of these delivery services send you email telling you your package couldn't be delivered and to download and print an invoice (!)
UPS has been used as the bait in numerous phishing/trojan attacks, as shown here by UPS themselves:
http://www.ups.com/media/en/fraud_email_examples.pdf
The email that begins "Hello My Dear" is pretty funny (my, my, aren't the folks in brown getting chummy?). And then there is the Nigerian one supposedly giving money to those who have been victims of online fraudulent activity...or my favorite - the one saying that your package has been intercepted and is temporarily being held in transit in Spain because it has been determined that it contains valuable items, and that in order to get it released, you're going to have pay for insurance required under new laws! "Concluding the verification on the package our office has ascertained that the package was not duly issnured." I'm sure UPS was fascinated to discover that they had a whole new department of "Postal Inspection Services"!
Or how about this ominous-sounding email:
"Attention;
This email is to notify you that we have intercepted your parcel from being delivered to you due to some security reasons as stated below.
1. Our scanning system detected your parcel containing a confirmable ATM CARD.
Before the parcel can be delivered, you being the receive is obliged to obtain a Duly Sworn Affidavit from the Spanish High Court in Spain to back up the the origin of the Parcel, this is in line with the Anti Terrorist Campaign due to the Law Implemented by government of United States of America to protect and reduce the terrorist activities."
Yes, there is no end to the creativity of the phishers and scammers.
As I've noted before, it's sad that all this creativity can't be put to more useful ends.
Post by: krissel on October 06, 2010, 02:32:33 AM
I don't mind redelivering the mail that belongs to my neighbors, but when my neighbors accidentally open my private banking and financial information because it was put in their mailbox by mistake and they automatically ripped open the envelope... well, I'm not pleased. I don't blame my neighbors, just the USPS. I'm grateful my neighbors are trustworthy, but I wonder how many other people have received my mail and haven't returned it.
OH, and then you could be unpleasantly surprised to find (at 1 AM) a package left on your lawn, about 20 feet from the end of the driveway... in the rain.
Yes, that is the poor excuse for mail service on my street.
I've written several complaints to the main online site and received two phone calls from the local postmaster apologizing but now I don't trust them with anything. I have to drive to the PO building to mail things as I think my carrier has it in for me now.
Post by: Paddy on October 06, 2010, 05:25:29 PM
Of course, as I've no doubt said before, the USPS is far superior to Canada Post - it's cheaper, faster, you get mail on Saturdays, post offices are generally NOT located at the back of drug stores, packages are delivered to your house...(depending on the class, we sometimes have to retrieve them from the post office here).
Post by: Jack W on October 06, 2010, 07:48:47 PM
Very sociable and terrifically efficient.
And the USPS guy at my old house was also terrific, altho I can't say the same for the substitutes.
FWIW
- Jack
Post by: krissel on October 07, 2010, 02:16:22 AM
But he retired and things were OK until the past couple years when it all went downhill. Not sure why but I have a feeling it is related to the closing of a nearby PO and their personnel were transferred to ours.
And getting rid of incompetent workers is really tough. My sister's ex was a carrier since his CPA work didn't bring in enough $. But after the divorce he would intercept her mail, open it and read the contents. She had to get a box at a distant PO to avoid his tampering. They wouldn't reprimand him because it was so hard to prove. But finally he got fired for hitting someone's car while delivering the mail and not reporting it. Yea.
OK, end of rant.
