Recent Phishing or Mailcious code Email

OLS · 03-25-2011, 09:02 PM

I need the members of this board who are getting a recent series of Spam emails to respond here about it if you would. We are trying to figure out how they began targeting certain members and who might be responsible. The emails purport to be from one or all of three package express companies. They relate how you have a package that has been sent to your home address and it will arrive in 7 days. There is a version that says 3 days also. There is an attachment (zip file) to the email that is supposedly tracking information that a person might be inclined to click on for information on these mysterious packages. Who wouldn't want some free thing coming in, what on earth might it be? yay. Let's see what it is and who it's from and where it is. Except it is likely just going to install a keystroke logger or other spyware program onto your computer.

I sure would like to hear from anyone who is getting this series of emails. We have a wild hunch that it might be coming from someone we know, but that is PURE speculation and needs to be completely triangulated or else it would just be an unfair witchhunt. With your help we might get one step closer to finding out. Or we might just find out that everyone in the world is getting them from Julian Assange, lol.

Brutus2600 · 03-25-2011, 09:14 PM

I never use my work email to sign up for ANYTHING...but I got that same junk "United Parcel Service" email on my personal email and my work email multiple times.

I believe it's just a big spam email that's gone out recently...because there is nothing that could correlate between my two emails.

Here is the exact email for comparison:

"Dear customer.

The parcel was sent your home address.
And it will arrive within 7 business day.

More information and the tracking number are attached in document below.

Thank you.
? 1994-2011 United Parcel Service of America, Inc."

Attached file was called: UPSnotify.rar‎ (6 KB‎)
Email address was: infojs @ups. com

Bill86 · 03-25-2011, 09:16 PM

These are who my emails are from.

"United Parcel Service" <info6baeu@ups.com>

and

"United Parcel Service" <info36@ups.com>

Both of mine say

Dear customer.

The parcel was sent your home address.
And it will arrive within 3 business day.

More information and the tracking number are attached in document below.

Thank you.
© 1994-2011 United Parcel Service of America, Inc.

The titles of the emails are

United Parcel Service notification #XXXXXXXXX I X'd out the numbers

and

United Parcel Service notification #X X'd out the single number

These went both straight to the spam box (yahoo email) and have no proper UPS banners or tracking numbers in the emails. There are attachments but there is no way in hell I'm clicking those.

M1903A1 · 03-25-2011, 09:32 PM

I've been getting the UPS spam as well...but I don't recall signing up for anything lately.

OLS · 03-25-2011, 09:33 PM

haha, I hit the Trifecta, I got all of the Major Carriers over the past few weeks. Very same MO, and you
are right, no WAY I am gonna click that. I am asking in PMs if the persons replying in tis thread have used
any online cigar vendors, so expect my call, lol. you do not have to share that info, but it might help this
investigation.

OLS · 03-25-2011, 09:37 PM

Ahh, We have our first NON-winner. This may be much wider, and therefore possibly not anyone we know, per se.

hotreds · 03-25-2011, 09:50 PM

I, too, have been getting daily emails from "UPS" indicating i had a package to be delivered. Yahoo filtered this to my "Spam" folder, and when I saw the attachment and the "dear customer" I simply deleted the message, feeling it was not legit, and that the attachment certainly contained something unpleasant. Next one I get I'll check the headers more carefully and post here.

cobra03 · 03-25-2011, 10:40 PM

Ive got several from both UPS and FEDEX. Deleted all of them without opening them. Started to get them a few weeks ago.

Eleven · 03-25-2011, 10:40 PM

I got 2 from UPS the other day. Never thought it could be connected to this place.

OLS · 03-25-2011, 10:51 PM

Waiting for a couple of PMs to maybe come back, this may not necessarily be as a result of this vendor person.
In fact it is looking like it is everywhere. More crow for me to eat, lol. I have developed a taste for it.

icehog3 · 03-25-2011, 11:37 PM

I have gotten these in the recent past, and never did any business, ever, with the person I believe some suspect.

Bill86 · 03-26-2011, 01:03 AM

I'm not sure how good this new source is but here's what I got googling "fake UPS emails".

http://news.softpedia.com/news/Fake-...l-191161.shtml

FWIW

EDIT - This doesn't prove anything seeing as how none of us know how said spammers got our emails. It only proves one person isn't doing this, if the source is reliable.

Coach Deg · 03-26-2011, 06:23 AM

Mine was a DHL package in the next 7 days

03-26-2011, 06:46 AM

I've gotten UPS, FEDEX, and DHL.

taltos · 03-26-2011, 06:47 AM

I got the UPS letter two days ago but deleted it immediately. If I get it again, I will post the respond name.

Hippi3Slay3r · 03-26-2011, 07:39 AM

Dear customer.

The parcel was sent your home address.
And it will arrive within 7 business day.

More information and the tracking number are attached in document below.

sent by: admisupport @ups .com
all my friends with Gmail accounts got this on the same day as I did id guess its just normal spam.

Devanmc · 03-26-2011, 07:50 AM

my personal hotmail inbox has at the moment 5622 new/unread emails. Dunno if i got anything from these people but there is alot of junk from the past 8 years ive NEVER looked at or opened.

jcruse64 · 03-26-2011, 07:53 AM

Have been getting one a week or so for the last several weeks, from all the major carriers. Ain't no way I'm opening that little paper clip. Only to my Yahoo account though. It is the account I use for all my online ordering, so it would be difficult to hang it on any one business/type business.

mmblz · 03-26-2011, 08:24 AM

spam is spam.
no black helicopters.

most impressive is that they send the email to 8 or 10 people.
i'm impressed that they've found a way to deliver one package to 10 addresses!

Barcode · 03-26-2011, 08:43 AM

I just went and looked in my spam folder and I had at least 2 in there from UPS.

03-25-2011, 09:02 PM	#1
OLS Suck It Join Date: Oct 2008 First Name: Brad Location: TN Posts: 7,912 Trading: (19)	Recent Phishing or Mailcious code Email I need the members of this board who are getting a recent series of Spam emails to respond here about it if you would. We are trying to figure out how they began targeting certain members and who might be responsible. The emails purport to be from one or all of three package express companies. They relate how you have a package that has been sent to your home address and it will arrive in 7 days. There is a version that says 3 days also. There is an attachment (zip file) to the email that is supposedly tracking information that a person might be inclined to click on for information on these mysterious packages. Who wouldn't want some free thing coming in, what on earth might it be? yay. Let's see what it is and who it's from and where it is. Except it is likely just going to install a keystroke logger or other spyware program onto your computer. I sure would like to hear from anyone who is getting this series of emails. We have a wild hunch that it might be coming from someone we know, but that is PURE speculation and needs to be completely triangulated or else it would just be an unfair witchhunt. With your help we might get one step closer to finding out. Or we might just find out that everyone in the world is getting them from Julian Assange, lol.

03-25-2011, 09:14 PM	#2
Brutus2600 Your resident lancerHO Join Date: Apr 2010 First Name: Brian Location: Fort Worth, TX Posts: 2,063 Trading: (46)	Re: Recent Phishing or Mailcious code Email I never use my work email to sign up for ANYTHING...but I got that same junk "United Parcel Service" email on my personal email and my work email multiple times. I believe it's just a big spam email that's gone out recently...because there is nothing that could correlate between my two emails. Here is the exact email for comparison: "Dear customer. The parcel was sent your home address. And it will arrive within 7 business day. More information and the tracking number are attached in document below. Thank you. ? 1994-2011 United Parcel Service of America, Inc." Attached file was called: UPSnotify.rar‎ (6 KB‎) Email address was: infojs @ups. com __________________ www.halfwheel.com \| news+reviews You can also follow me on Twitter @brutus2600 Last edited by 68TriShield; 03-26-2011 at 08:16 AM. Reason: disable link

03-25-2011, 09:16 PM	#3
Bill86 Snob Join Date: Jul 2010 First Name: Bill Posts: 6,704 Trading: (67)	Re: Recent Phishing or Mailcious code Email These are who my emails are from. "United Parcel Service" <info6baeu@ups.com> and "United Parcel Service" <info36@ups.com> Both of mine say Dear customer. The parcel was sent your home address. And it will arrive within 3 business day. More information and the tracking number are attached in document below. Thank you. © 1994-2011 United Parcel Service of America, Inc. The titles of the emails are United Parcel Service notification #XXXXXXXXX I X'd out the numbers and United Parcel Service notification #X X'd out the single number These went both straight to the spam box (yahoo email) and have no proper UPS banners or tracking numbers in the emails. There are attachments but there is no way in hell I'm clicking those.

03-25-2011, 09:32 PM	#4
M1903A1 Have My Own Room Join Date: Oct 2008 Location: 1060 W. Addison Posts: 1,573 Trading: (4)	Re: Recent Phishing or Mailcious code Email I've been getting the UPS spam as well...but I don't recall signing up for anything lately. __________________ "It's the cigars that bring us together, but it's the people that cause us to stay."

03-25-2011, 09:33 PM	#5
OLS Suck It Join Date: Oct 2008 First Name: Brad Location: TN Posts: 7,912 Trading: (19)	Re: Recent Phishing or Mailcious code Email haha, I hit the Trifecta, I got all of the Major Carriers over the past few weeks. Very same MO, and you are right, no WAY I am gonna click that. I am asking in PMs if the persons replying in tis thread have used any online cigar vendors, so expect my call, lol. you do not have to share that info, but it might help this investigation.

03-25-2011, 09:37 PM	#6
OLS Suck It Join Date: Oct 2008 First Name: Brad Location: TN Posts: 7,912 Trading: (19)	Re: Recent Phishing or Mailcious code Email Ahh, We have our first NON-winner. This may be much wider, and therefore possibly not anyone we know, per se.

03-25-2011, 09:50 PM	#7
hotreds Ephesians 2:8 Join Date: Oct 2008 Location: 5 miles past "Resume Speed" Posts: 11,662 Trading: (63)	Re: Recent Phishing or Mailcious code Email I, too, have been getting daily emails from "UPS" indicating i had a package to be delivered. Yahoo filtered this to my "Spam" folder, and when I saw the attachment and the "dear customer" I simply deleted the message, feeling it was not legit, and that the attachment certainly contained something unpleasant. Next one I get I'll check the headers more carefully and post here. __________________ God loves you so much, that he made you read this, just to let you know.

03-25-2011, 10:40 PM	#8
cobra03 Adult Babysitter Join Date: Aug 2009 First Name: Scott Location: Hamburg, NY Posts: 1,880 Trading: (15)	Re: Recent Phishing or Mailcious code Email Ive got several from both UPS and FEDEX. Deleted all of them without opening them. Started to get them a few weeks ago. __________________ "I'm feelin' low, Apu. You got any of that beer that has candy floating in it, you know Skittlebrau?https://www.facebook.com/thebuffalobeerleague

03-25-2011, 10:40 PM	#9
Eleven Solid As The Sun Join Date: Aug 2009 First Name: Scott Location: SW Ohio Posts: 1,859 Trading: (23)	Re: Recent Phishing or Mailcious code Email I got 2 from UPS the other day. Never thought it could be connected to this place. __________________ CA: putting the 'man' in bromance since 2008! --markem.

03-25-2011, 10:51 PM	#10
OLS Suck It Join Date: Oct 2008 First Name: Brad Location: TN Posts: 7,912 Trading: (19)	Re: Recent Phishing or Mailcious code Email Waiting for a couple of PMs to maybe come back, this may not necessarily be as a result of this vendor person. In fact it is looking like it is everywhere. More crow for me to eat, lol. I have developed a taste for it.

03-25-2011, 11:37 PM	#11
icehog3 Admiral Douchebag Join Date: Oct 2008 First Name: Tom Location: Clermont, Kentucky Posts: 71,307 Trading: (60)	Re: Recent Phishing or Mailcious code Email I have gotten these in the recent past, and never did any business, ever, with the person I believe some suspect. __________________ Thanks Dave, Julian, James, Kelly, Peter, Gerry, Dave, Mo, Frank, Týr and Mr. Mark!

03-26-2011, 01:03 AM	#12
Bill86 Snob Join Date: Jul 2010 First Name: Bill Posts: 6,704 Trading: (67)	Re: Recent Phishing or Mailcious code Email I'm not sure how good this new source is but here's what I got googling "fake UPS emails". http://news.softpedia.com/news/Fake-...l-191161.shtml FWIW EDIT - This doesn't prove anything seeing as how none of us know how said spammers got our emails. It only proves one person isn't doing this, if the source is reliable.

03-26-2011, 06:23 AM	#13
Coach Deg C O W eieio. Join Date: May 2009 First Name: Mike Location: Hudson, FL Posts: 2,853 Trading: (59)	Re: Recent Phishing or Mailcious code Email Mine was a DHL package in the next 7 days

03-26-2011, 06:46 AM	#14
TRicker Guest Posts: n/a	Re: Recent Phishing or Mailcious code Email I've gotten UPS, FEDEX, and DHL.

03-26-2011, 06:47 AM	#15
taltos Really, really old Join Date: Oct 2008 First Name: Paul Location: Saugus, MA Posts: 2,486 Trading: (3)	Re: Recent Phishing or Mailcious code Email I got the UPS letter two days ago but deleted it immediately. If I get it again, I will post the respond name. __________________ Jimmy, some of its magic, some of its tragic, but I had a good life all the way. He Went to Paris, J. Buffett

03-26-2011, 07:39 AM	#16
Hippi3Slay3r ಥ_ಥ Join Date: Apr 2009 First Name: Kyle Location: Appleton WI Posts: 615 Trading: (22)	Re: Recent Phishing or Mailcious code Email Dear customer. The parcel was sent your home address. And it will arrive within 7 business day. More information and the tracking number are attached in document below. sent by: admisupport @ups .com all my friends with Gmail accounts got this on the same day as I did id guess its just normal spam. __________________ "We must all hang together, or assuredly we shall all hang separately." -Benjamin franklin.

03-26-2011, 07:50 AM	#17
Devanmc Have My Own Room Join Date: Sep 2010 First Name: Devan Location: The Zoo Posts: 1,971 Trading: (40)	Re: Recent Phishing or Mailcious code Email my personal hotmail inbox has at the moment 5622 new/unread emails. Dunno if i got anything from these people but there is alot of junk from the past 8 years ive NEVER looked at or opened. __________________ I spent a lot of my money on booze, cigars, birds and fast cars, the rest I just squandered. -George Best

03-26-2011, 07:53 AM	#18
jcruse64 Adjusting to the Life Join Date: Jan 2009 First Name: Joe Location: Paducah, KY USA planet Earth Posts: 313 Trading: (1)	Re: Recent Phishing or Mailcious code Email Have been getting one a week or so for the last several weeks, from all the major carriers. Ain't no way I'm opening that little paper clip. Only to my Yahoo account though. It is the account I use for all my online ordering, so it would be difficult to hang it on any one business/type business.

03-26-2011, 08:24 AM	#19
mmblz .090909... Join Date: Oct 2008 Location: NH Posts: 4,031 Trading: (3)	Re: Recent Phishing or Mailcious code Email spam is spam. no black helicopters. most impressive is that they send the email to 8 or 10 people. i'm impressed that they've found a way to deliver one package to 10 addresses! __________________ herf wear

03-26-2011, 08:43 AM	#20
Barcode Adjusting to the Life Join Date: May 2010 First Name: Tom Location: Everett, WA Posts: 477 Trading: (16)	Re: Recent Phishing or Mailcious code Email I just went and looked in my spam folder and I had at least 2 in there from UPS.