Beware! DHL Express malware attack appearing in inboxes


Doorbell. Image from ShutterstockTake care folks if you’re returning to your inbox today, after a weekend away. A malicious email could be lurking there – waiting to infect your computers.

SophosLabs has intercepted a widespread malware campaign that has been spammed out, disguised as a communication from DHL Express.

The emails have the subject line “Processing complete successfully”, and claim to be a DHL Express Tracking Notification.

The emails look like the following (click on the image for a larger version):

DHL malicious email. Click for larger version

Attached to each of the emails is a file,, which contains malware that Sophos products detect as Troj/BredoZp-S.

If you unzip the file, and open its contents, you will be putting your Windows computer at risk of infection.

Malicious emails claiming to come from the likes of DHL, FedEx and UPS are nothing new. The reason why we continue to see malware attacks using this kind of disguise though is easy to understand – it works.

Don’t allow yourself, your friends and family to be suckered in by social engineering like this.

Get clued up about security threats by reading sites like Naked Security (you can subscribe to our free newsletter or RSS feed if you like..).

Remember that you should always exercise caution about opening attachments in unsolicited emails.

Doorbell image from Shutterstock.