UPS email

agrinnall

I ordered 3 printer cartridges from Amazon, one of which came from Caboodle. I had an email from them to say it had been dispatched for delivery by UPS, then yesterday I had a card through the letter box saying my package had been left with a neighbour, which it had - all fine so far.

Today I got an email from joiner2@ups.com :

Dear customer.

The parcel was sent your home address.
And it will arrive within 7 business day.

More information and the tracking number are attached in document below.

Thank you.
© 1994-2011 United Parcel Service of America, Inc.

The attachment is a file called UPSnotify.rar, I tried to open it with VideoLan but nothing happened. Is this a valid email from UPS and if so why would they send the details in a rar file?

custardy

rar files open with winrar(though video lan will see it as an ISO)
I wouldnt be opening it as it means nothing to you.
you have the package

edit: malware

http://gladiator-antivirus.com/forum/index.php?showtopic=116560

Treacle123

I got one of these emails from [EMAIL="joiner2@ups.com"]joiner2@ups.com[/EMAIL] today too. Well, I almost did but my antivirus detected it as containing a virus first. So yes - don't open it!

The message I got was:
The following viruses were repaired or dropped from the message (MID 116597779)
'Mal/Bredo-K', 'Mal/RarMal-C'

sirmarcus

Got an email as well today. Did not open it and deleted immediately.

squeaky

Hi all,

I reckon the best place for this one is the techy board. Especially if a later poster manages to open the file and experiences problems, so I'll move the thread across.

Forum_Team wrote:

Hi, Martin’s asked me to post this in these circumstances: I’ve asked Board Guides to move threads if they’ll receive a better response elsewhere (please see this rule) so this post/thread has been moved to another board, where it should get more replies. If you have any questions about this policy please email [EMAIL="forumteam@moneysavingexpert.com"]forumteam@moneysavingexpert.com[/EMAIL].

agrinnall

Thanks everyone. Guess I'd better run malwarebytes just in case trying to open it has caused any of the nasties to be downloaded.

Equaliser123

Same here. Stopped by Avast.

Wonder if it is linked to the play.com security breach...

agrinnall

Malwarebytes came up clear, phew! I had put off moving from AVG despite many posts suggesting it's no longer up to scratch but now that I have proof that it didn't spot a threat I think I'd better change.

jayme1

Equaliser123 wrote: »

Same here. Stopped by Avast.

Wonder if it is linked to the play.com security breach...

I doubt it these fake UPS email have been going a while, though there is nothing stopping the spammers sending the emails to any email collected in the play.com breach, just I know people have had them before the play.com breach happened.

closed

Malwarebytes does not catch everything, scan with avast.

debitcardmayhem

jayme1 wrote: »

I doubt it these fake UPS email have been going a while, though there is nothing stopping the spammers sending the emails to any email collected in the play.com breach, just I know people have had them before the play.com breach happened.

I've had the UPS one today, and the DHL one last week, and mine were attached to my ft dot com address. Norton caught them all and so did my other ISP for my other FT address.