New wave of USPS Scam

If you have received an email like the one below you need to be extremely cautious. It looks highly authentic and many people may feel that it has come from the USPS (United States Postal Service). The fraudulent email carries the subject line – “Track Your parcel NO#61271” and has a malicious zip file attached with it. The attacker attempts to misguide the user and asks him to open the attached file for package delivery details.

On extraction of the attached zip file, it gives a USPS_document.exe file which has a PDF file icon.

If anyone executes this file on the machine mistaking it to be a PDF file then the computer gets badly infected. On execution of the USPS_document.exe file it installs a Rogueware named Smart Protection 2012.

This Rogueware has recently been found ‘in the wild’ and could have a huge impact in the coming days.
Quick Heal successfully detects and deletes the attached file along with the installed Rogueware.

Ranjeet Menon