Fake Royal Mail e-mails with virus attachment

[Wessex]

A number of customers came into our front office today to collect parcels today after receiving fake emails purporting to be from rm .

Attached to the email were attachments that contained a virus.

Is this a country wide issue I wonder , if so the callers office are going to be hectic tomorrow.

[TrueBlueTerrier]

this keeps popping up now and again

Below is the version which came up last year. http://www.royalmailchat.co.uk/communit ... an#p266678" onclick="window.open(this.href);return false;

"IMPORTANT: Royal Mail Delivery Invoice #1092817" Virus / Trojan
The wording may vary, but this is a PDF exploit currently doing the rounds pretending to be from Royal Mail. Sophos, F-Secure and Avast detect it along with some other products (VT results here) but otherwise detection is patchy.

Subject: IMPORTANT: Royal Mail Delivery Invoice #1092817
From: "Royal Mail" <delivery@royalmail.com>
Date: Wed, April 14, 2010 11:28 am

We missed you, when trying to deliver.

Please view the invoice and contact us with any questions.

We will try to deliver again the following business day.

Royal Mail.

Attachments:
Royal_Mail_Delivery_Invoice_1092817.pdf

[Wessex]

Yep ' different wording but the psychology used is the same .Sadly many people will instantly trust anything with RM on it as being genuine from the years when we were still a great company in the eyes of the public .

[Jess]

The one I got this week was:-

From:- support_id.3521@royalmail.com

Dear customer.

A courier did not deliver the package to your address.
Reason: The delivery address is wrong
Please find the attached document containing detailed information about delivery failure.
Read all information carefully and come to the "Royal Mail" office to receive your package.

Thank you.
Australia Post Service.

with attachment :- Delivery_Information#89116.zip

My virus scan says OK, but I wouldn't open it in a month of Sundays.

A customer asked me today about this email, so it must be pretty widespread.

[fishtank]

Sadly many people will instantly trust anything with RM on it as being genuine.

Employees excepted obviously.

[Wessex]

The public have yet t orealise what is happening to rm yet ,they are in for a shock in the run up to xmas methinks ft.

[Wessex]

The one I got this week was:-

From:- support_id.3521@royalmail.com

Dear customer.

A courier did not deliver the package to your address.
Reason: The delivery address is wrong
Please find the attached document containing detailed information about delivery failure.
Read all information carefully and come to the "Royal Mail" office to receive your package.

Thank you.
Australia Post Service.

with attachment :- Delivery_Information#89116.zip

My virus scan says OK, but I wouldn't open it in a month of Sundays.

A customer asked me today about this email, so it must be pretty widespread.

This was similar to the ones I was shown today, I assumed royal mail was referring to us but of course it can also refer to our cousins down under

[arnold cheshire]

A number of customers came into our front office today to collect parcels today after receiving fake emails purporting to be from rm .

Attached to the email were attachments that contained a virus.

Is this a country wide issue I wonder , if so the callers office are going to be hectic tomorrow.

how would royal mail get your email address ? think about it

[Wessex]

A number of customers came into our front office today to collect parcels today after receiving fake emails purporting to be from rm .

Attached to the email were attachments that contained a virus.

Is this a country wide issue I wonder , if so the callers office are going to be hectic tomorrow.

how would royal mail get your email address ? think about it

Most people are probably ' expecting ' a parcel that they ordered on the internet these days , their assumption which would be natural I guess is that the company that you ordered from had somehow given rm your email !!!

There are a lot of gullible people out there particularly oaps who are not as technically savvy as younger folk when it comes to computers.

[andy2007]

A number of customers came into our front office today to collect parcels today after receiving fake emails purporting to be from rm .

Attached to the email were attachments that contained a virus.

Is this a country wide issue I wonder , if so the callers office are going to be hectic tomorrow.

how would royal mail get your email address ? think about it

The same way as any other Company. There's plenty of Agencies, who provide our details to Companies for advertising purposes. So it's logical for the Customers to assume that RM have either got their Email address from somewhere like that, if not from the Company/individual who they're expecting the parcel from. The worrying aspect of this series of attacks, is that they've managed to make them look like they've been sent from an RM computer.

[arnold cheshire]

so how do the scammers now youve ordered a parcel of the web ??????????? if you hadnt ordered a parcel would you believe this scam then I THINK NOT ! do they ask for money to redeliver ?

[dvbuk55]

I'm in the North West, the first time I've seen it but it was evident today.

[andy2007]

so how do the scammers now youve ordered a parcel of the web ??????????? if you hadnt ordered a parcel would you believe this scam then I THINK NOT ! do they ask for money to redeliver ?

I don't know. As Wessex pointed out: There are a lot of guillible people out there, who would assume that they'd forgotten about a parcel. Besides. I was answering the question of how RM could get access to our Email addresses. Not whether I could explain how the criminals were getting the info about people. Although I suspect they're using the same method to get Email addresses, and just sending them out randomly, on spec., in the hope of catching as many people as possible out.

[Jess]

Two more arrived today:

Error in the delivery address No27118

Dear customer.

A courier did not deliver the package to your address.
Reason: ncorrect delivery address of the package.
Information about your package is attached to the letter.
Read all information carefully and come to the "Royal Mail" office to receive your package.

Thank you for attention.
Royal Mail Service.

and

Royal Mail Delivery refuse

Dear customer.

A courier did not deliver the package to your address.
Reason: The package is too large
Information about your package is attached to the letter.
Read all information carefully and come to the "Royal Mail" office to receive your package.

Thank you for using our delivery company.
Royal Mail Service.

Looks like from the IP Address they originated in ( or sent via ) Spain.

These emails are a pain in the a****, however, I wish this useless lot of timewasters would get their spelling and English grammar right ! It's really offensive reading this poorly prepared stuff.

[BELIAL]

Couldn't give a s**t ,who cares?