Fake emails – USPS: Delivery Failed Notification

The United States Postal Service (also known as USPS, the Post Office or U.S. Mail) is an independent agency of the United States Government responsible for providing postal service in the United States. Scammers are taking advantage of it with specially crafted emails that are spreading over the Internet. The latest email pretends to be from USPS and asks the user to take a printout of the attached document and contact the nearest office for their package, which the USPS was unable to deliver at the given address as it was erroneous.

The attached file is an executable file with a PDF file icon. Upon execution the machine gets heavily infected. In this case the attached sample installs the rogueware named XP Home Security 2012.

Quick Heal detects and cleans the attached file and the installed rogueware.

Ranjeet Menon