Email scam features ‘FedEx’ – Do Not Open!

An email scam carrying a virus appears to be sent from ‘FedEx…….. and is being sent with a .zip file attachment – DO NOT OPEN THIS – as your machine will become infected.

Stockport based Amshire IT Solutions are warning businesses of one of the latest email scams to be doing the rounds.

An email with an attachment is appearing to come from FedEx is actually a variant of the ransomware Cryptolocker.  If the attachment is opened, it may appear to not do anything.  However, behind the scenes this will run a script that will encrypt all files/folders you have access to and demand payment to unlock them.

Dave Taylor, managing director at Amshire warns: “We have received reports of fraudulent emails with the subject lines “Shipping Conformation,” “Verify Info,” “Some important information is missing” and “Please fulfil the documents attached to verify your identity.

“The fraudulent email may have an attached file that may contain a virus or other malware.”

A report on the FedEx website says: “These fraudulent emails appear to originate from a FedEx employee (e.g. ‘bjones@fedex.com’). The body of the message may contain a fake notice related to FedEx services or may contain only a random phrase or sentence. Be aware, the attachment contained in the email may contain a computer virus. Do not open the attachment. Delete the email immediately.”

Example of a scam or fradulent email:

Subject: Fedex Tracking number N4815347

From: “Fedex Manager, Willis Grabinger”

Dear.
Unfortunately we failed to deliver the postal package you have sent on the 27th of July in time because the recipient’s address is erroneous. Please print out the invoice copy attached and collect the package at our office. * This site is protected by copyright and trademark laws under US and International law. 

Fund manager finds plenty of virtue in sin stocks

ATTACHMENT: FEDEXInvoiceEE057100OP.zip

Subject: Fedex Item Status N0367092

Feds Shut Down Big Chicago Bank, 7 Others

ATTACHMENT: FEDEXInvoiceEE057100OP.zip

Subject: Fedex Invoice copy N9728605

Report: Gov’t cover-up in 1972 NIreland bombing

ATTACHMENT: FEDEXInvoiceEE059185OP.zip

If you receive a message matching this description below, do not open the email or click on the attachment. Delete the email immediately or forward it to abuse@fedex.com.

FedEx does not send unsolicited emails to customers requesting information regarding packages, invoices, account numbers, passwords or personal information.  

Amshire’s advice is – DELETE the email.  DO NOT open the zip file

Source of examples: FedEx Prevent Fraud