UPS email attachment virus

[Thomas C]

Looks like we are getting hit as well. Is this a new variant of the virus? Appriver seems to be the first with any information.

AppRiver Malware Watch: X.TrojanSpy:ups_Zbot

Thomas

[Thomas C]

---- edit

double post

[DAustin]

Quote:

Originally Posted by bizbox

I just received this it is from UPS Mail Support, subject is Your Tracking # 0540548533

the attachment is UPSInvoice8771.zip

The body reads

Sorry, we were not able to deliver postal package you sent on October the 19th in time because the recipient’s address is not correct.
Please print out the invoice copy attached and collect the package at our office.
If you do not receive package in ten days you will have to pay 6$ per day.

Your UPS


Like an idiot I click on it without thinking. It put it in temo File and will not delete. Oh Joy!

The phishing bastards are charging me $36!!! I'm getting ripped off!!! I did not open zip files btw. *Almost* did, but not quite. Good luck restoring!

[237]

UPS: Your Tracking # 083985165619‏
From: <img id="P___717703412" webimdisplaystyle="inline" style="display: none;"> United Postal Service (mail@ups.com)
You may not know this sender.Sent: 17 December 2008 01:26:56 To: 1 attachment(s)
DOC651221...zip (42.6KB) (NOTE ATTACHMENTS DISABLED FOR SAFETY)


Sorry, we were not able to deliver postal package you sent on November the 1st in time
because the recipient’s address is not correct.

Please print out the invoice copy attached and collect the package at our office.
If you do not receive package in ten days you will have to pay 36$ per day.

Your UPS
This is the message i had delivered to my email this morning. Firstly i do use courier services
often, however i very rarely use UPS. A number of things which alerted me that this was or could have
been a virus First the document zip is a big clue. When ever i receive an email
concerning a failed delivery a message will be sent to me but not through a zip file, so sorry boys
who ever made this you messed up there.2nd i got told that this would cost me 36$ per day
if i did not collect, well if this was my parcel all my details would be there and last they would
know i don't live in the USA so you messed up also.
3rd No contact name at the end of the email. Never fooled me

[Mary Smith]

THIS IS WHAT I RECEIVED BY E-MAIL TODAY:

From: ups02@post.ro
Subject: Attention,Attention,Attention
Date: February 15, 2009 4:52:33 PM PST
To: undisclosed-recipients: ;
Reply-To: ups01@post.ro

From: Daniel Jones
Dispatch Manager
United Parcel Service(UPS)
Phone:011-234-802-4417603

Customers Service Hours--Monday to Saturday:
Office Hours Monday to Saturday:

Attention,Attention,Attention

This is the United Parcel Service (UPS)mailing you
in respect of your ATM INTER SWITCH CARD that Mrs.
Monica Stewart brought to this company to be delivered to
you and before protocol commence we had a disput with the
(NICON)Insuarnce office about your insurance certificate but
all that was settled.

We are happy to inform you that your ATM INTER SWITCH
CARD that contains US$1,600,000,00 dollars' is among the 24
parcel's listed which is now in our office and also with your
name as the receiver despite that we lost your residential
address and we request that you re-send it to this office for
safe delivery of your card Without hesitation we advise
you to pay the delivery fee of US$80.00 via western union
to our cashier 2 below payment information for immediate
despatch of your parcel to your residentail address within 2days.
As the sender did not pay the US$80.00

Send the Delivery Fee through Western Union OR MoneyGram via this Payment
Information below

RECEIVERS NAME------ DUBEM ANDY
ADDRESS------------------24,AKOSA STR,SATELLITE TOWN
RECEIVERS COUNTRY----LAGOS /NIGERIA.
TEXT QUESTION------------WHAT BATCH.
TEXT ANSWER---------------.BATCH 1
AMOUNT TO BE PAID---------US$80.00

Send the payment information,the 10 Digit MTCN OR 8 Digit REFERENCE numbers
immediately

Yours In Service

Mr.Daniel Jones
Dispatch Manager
United Parcel Service(UPS)


No virus found in this outgoing message
Checked by PC Tools AntiVirus (4.0.0.20 - 10.054.001).
PC Tools AntiVirus - Free Anti Virus Download and Removal

[di52]

Attachment: Your_UPS_feea.zip(51.3KB)

Hello!

Unfortunately we were not able to deliver your postal package sent on the 21st of June in time
because the recipient's address is not correct.
Please print out the invoice copy attached and collect the package at our office.

United Parcel Service of America.




--------------------------------------------------------------------------------



No virus found in this incoming message.
Checked by AVG - AVG Antivirus and Security Software - Real-time protection against viruses, spyware and malicious websites
Version: 8.5.421 / Virus Database: 270.14.5/2419 - Release Date: 10/07/09 05:18:00

[SiliconJon]

I saw a DHL one earlier this week, also.