{"id":1257,"date":"2019-04-06T19:33:34","date_gmt":"2019-04-06T19:33:34","guid":{"rendered":"http:\/\/www.syyhoaxanalyzer.com\/?p=1257"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T17:00:00","slug":"DHL-\"We-Couldn't-Deliver-Your-Parcel\";-Malware-Emails-Continue","status":"publish","type":"post","link":"https:\/\/www.syyhoaxanalyzer.com\/?p=1257","title":{"rendered":"DHL &#8220;We Couldn&#8217;t Deliver Your Parcel&#8221;; Malware Emails Continue"},"content":{"rendered":"<div>\n<p><span style=\"color: #ff0000;\"><strong>Outline:<\/strong><\/span><br \/>\nEmail purporting to be from DHL Express claims that the company could not deliver your parcel because the delivery address could not be verified. The email urges you to open an attached .zip file to access and print a shipment label.<br \/>\n<script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- HS Net Top Content Responsive --><br \/>\n<ins class=\"adsbygoogle\" style=\"display: block;\" data-ad-client=\"ca-pub-0355887770822260\" data-ad-slot=\"4870821038\" data-ad-format=\"auto\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><br \/>\n<span style=\"color: #ff0000;\"><strong>Brief Analysis:<\/strong><\/span><br \/>\nThe email is not from DHL and the claim that a parcel could not be delivered is a lie. The attached zip file harbours a malicious file that, if opened, can install Locky ransomware on your computer. This message is just one in a long line of &#8220;failed parcel delivery&#8221; malware emails.<\/p>\n<div class=\"example\"><span style=\"color: #ff0000;\"><b>Example:<\/b><\/span><br \/>\n<strong>Subject: Parcel details<\/strong>Dear [name removed]<\/p>\n<p>We couldn&#8217;t deliver your parcel on September 30th because we couldn&#8217;t verify the given address.Attached is the shipment label. Please print it out to take the parcel from our office.Label-ID: a5175b10d91c748787c08c4b79963d47a97907800fdf<\/p>\n<p>Best Wishes,<br \/>\n[Name Removed]<br \/>\nDHL Express Service<\/p>\n<\/div>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- HSNet Article Center --><br \/>\n<ins class=\"adsbygoogle\" style=\"display: block;\" data-ad-client=\"ca-pub-0355887770822260\" data-ad-slot=\"5727909035\" data-ad-format=\"auto\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><br \/>\n<span style=\"color: #ff0000;\"><strong>Detailed Analysis:<\/strong><\/span><br \/>\nAccording to this email, which claims to be from delivery company DHL, the company could not deliver your parcel on a specified date. Supposedly, the delivery failed because DHL could not verify your delivery address. It instructs \u00a0you to open an attached file so that you can print out a shipment label \u00a0to take to your local DHL office.<\/p>\n<p>However, the email has no connection whatsoever with DHL and the attachment does not contain a shipment \u00a0label.<\/p>\n<p>If you open the attached .zip file you will find that it contains a malicious file withe the extension &#8220;.wsf&#8221;. If you then open this file, Locky ransomware <a title=\"another DHL cannot deliver your parcel malspam delivers Locky\" href=\"https:\/\/myonlinesecurity.co.uk\/another-dhl-cannot-deliver-your-parcel-malspam-delivers-locky\/\">will be installed<\/a> on your Windows computer.<\/p>\n<p>Once installed, Locky can encrypt all of the important files on your computer. It will than demand that you pay a fee to online criminals to get the key to decrypt your files.<\/p>\n<p>There is no quick or easy way to recover your files unless you \u00a0have \u00a0recent off-computer backups.  \u00a0If you do \u00a0pay the requested fee, you might \u00a0receive the decryption key as promised. However, since you will be dealing with criminals, there is no guarantee that they will ever \u00a0give you the promised key.<\/p>\n<p>This malware email is just one in a long line of similar &#8220;delivery failure&#8221; <a title=\"DHL Notification Malware Email\" href=\"http:\/\/www.hoax-slayer.com\/dhl-malware-emails.shtml\">malware messages<\/a> that have been hitting inboxes all around the world for several years. Alternative versions have \u00a0claimed to be from <a title=\"FedEx Incorrect Delivery Address Malware Email\" href=\"http:\/\/www.hoax-slayer.com\/fake-fedex-invoice-malware.shtml\">FedEx<\/a>, UPS, Australia Post and a number of other companies.<\/p>\n<p>Be wary of any email or text message that claims that a parcel delivery has failed due to an addressing error.<\/p>\n<div align=\"center\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- HS Net Bottom AdLinks --><br \/>\n<ins class=\"adsbygoogle\" style=\"display: block;\" data-ad-client=\"ca-pub-0355887770822260\" data-ad-slot=\"1358951439\" data-ad-format=\"link\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/div>\n<p>The following Hoax-Slayer YouTube video covers a FedEx version of this malware attack:<\/p>\n<div align=\"center\"><iframe loading=\"lazy\" src=\"https:\/\/www.youtube.com\/embed\/7IMcMQ38kCE\" width=\"560\" height=\"315\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/div>\n<p><a href=\"http:\/\/hoax-slayer.net\/wp-content\/uploads\/2016\/10\/dhl-malware-2016-1.jpg\" data-rel=\"penci-gallery-image-content\" ><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"2492\" data-permalink=\"https:\/\/www.hoax-slayer.net\/dhl-we-couldnt-deliver-your-parcel-malware-emails-continue\/dhl-malware-2016-1\/\" data-orig-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2016\/10\/dhl-malware-2016-1.jpg\" data-orig-size=\"800,705\" data-comments-opened=\"0\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"dhl-malware-2016-1\" data-image-description=\"\" data-medium-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2016\/10\/dhl-malware-2016-1-300x264.jpg\" data-large-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2016\/10\/dhl-malware-2016-1.jpg\" class=\"aligncenter size-full wp-image-2492\" src=\"https:\/\/hoax-slayer.net\/wp-content\/uploads\/2016\/10\/dhl-malware-2016-1.jpg\" alt=\"DHL parcel delivery malware email\" width=\"800\" height=\"705\" srcset=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2016\/10\/dhl-malware-2016-1.jpg 800w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2016\/10\/dhl-malware-2016-1-300x264.jpg 300w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2016\/10\/dhl-malware-2016-1-768x677.jpg 768w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2016\/10\/dhl-malware-2016-1-227x200.jpg 227w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/a><\/p>\n<p class=\"date\">Last updated: October 2, 2016<br \/>\nFirst published: October 2, 2016<br \/>\nBy Brett M. Christensen<br \/>\n<a class=\"foot\" href=\"http:\/\/www.hoax-slayer.com\/about.shtml\">About Hoax-Slayer<\/a><\/p>\n<p class=\"ref\">References<br \/>\n<a title=\"another DHL cannot deliver your parcel malspam delivers Locky\" href=\"https:\/\/myonlinesecurity.co.uk\/another-dhl-cannot-deliver-your-parcel-malspam-delivers-locky\/\">another DHL cannot deliver your parcel malspam delivers Locky<\/a><br \/>\n<a title=\"DHL Notification Malware Email\" href=\"http:\/\/www.hoax-slayer.com\/dhl-malware-emails.shtml\">DHL Notification Malware Email<\/a><br \/>\n<a title=\"FedEx Incorrect Delivery Address Malware Email\" href=\"http:\/\/www.hoax-slayer.com\/fake-fedex-invoice-malware.shtml\">FedEx Incorrect Delivery Address Malware Email<\/a><\/p>\n<p>&nbsp;<\/p>\n<p><\/br><\/br> Original Source : <a href=\"https:\/\/www.hoax-slayer.net\/dhl-we-couldnt-deliver-your-parcel-malware-emails-continue\/\" target=\"_blank\">https:\/\/www.hoax-slayer.net\/dhl-we-couldnt-deliver-your-parcel-malware-emails-continue\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Outline: Email purporting to be from DHL Express claims that the company could not deliver your parcel because the delivery address could not be verified. The email urges you to open an attached .zip file to access and print a shipment label. Brief Analysis: The email is not from DHL and the claim that a [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":6890,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1257","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hoax-inggris"],"_links":{"self":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts\/1257"}],"collection":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1257"}],"version-history":[{"count":0,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts\/1257\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/media\/6890"}],"wp:attachment":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1257"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1257"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1257"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}