Pat Gaudette

I just received this email from DHL:

From: “DHL Support Marguerite Champagne” <xxx @dhl-usa.com>
To: xxx
Subject: DHL Tracking NR 44916176.

Dear customer!

Unfortunately we were not able to deliver the postal package you have sent on the 13th of March in time because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our department.

DHL Customer Services.

Attachment: DHL_invoice_copy_5327.zip

I did not rush to open the attachment although I’m sure there have been more than a few people not so fortunate. First, the email was sent to one of my email accounts that I don’t use for business purposes. Second, if I was their customer, wouldn’t they know my name and use it in the email? And, third, why send an invoice as a zip file instead of a pdf?

More information about the malicious trojan contained in the zip file is here.