DHL tracking number emails contain malware

by Graham Cluley on March 23, 2009 | Comments Off

Filed Under: Malware, Spam

Once again the bad guys are hard at work, spamming out dangerous emails. This morning it's emails which claim to come from DHL, saying they were not able to deliver a postal package you sent on 14th of March because the recipient's address was incorrect.

DHL delivery malicious email

Of course, the emails are not really from DHL.

If you open the file inside the attachment (called DHL_DOC.zip) you will be infected by the Troj/Bckdr-QSL backdoor Trojan horse, which will attempt to take control of your PC.

The emails we are seeing in our spam traps all use the subject line "DHL Tracking number" but have a randomly generated reference number.

Some subject lines used in the fake DHL email malware campaign

As always, be very very suspicious of unsolicited email attachments and make sure that your anti-virus software is properly updated.

Tags:

About the author

Graham Cluley has worked in the computer security industry for more than 20 years, developing anti-virus software and doing quite a lot of talking about internet threats. He's won awards for his blogging, but is proudest of the text adventure games he wrote when he was still wearing short trousers. You can learn more about those (the games, not the trousers) at grahamcluley.com. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.