Phishing emails regarding UPS parcel: UPS: Tracking Number Notification


Usually we intercept emails regarding an fake UPS tracking or delivery issue with viruses and trojans attached at MX Lab, http://www.mxlab.eu, but today, we intercepted some phishing emails regarding “UPS parcel”.

The email is sent from the spoofed address “United Parcel Service <powerhost.giv@ups.com>”, listens to the subject “UPS: Tracking Number Notification” and has the following body:

Dear Customer,

Your Parcel has been returned to the UPS office nearest to you.
The reason for the return is as a result of incorrect delivery address information.
Kindly click on the below link to update us with your Mobile Number and in less than (42 hours) an agent will contact you on phone to correct your delivery address to enable delivery of parcel.

To update us with your Mobile Number, please Click Here and enter the below tracking number of Parcel.

Tracking # ( 1Z9575R2P297341747 )

Note: Ensure you enter your correct email information and Mobile Number to enable us reach you on phone.

UPS Logistic Service.
*******************************
Copyright © 1994-2012 United Parcel Service of America, Inc. All rights reserved

The first URL, hxxp://www.simonkagyorgy.hu/wp-content/uploads/2012/02/txt.htm, and is used for redirection to hxxp://www.sarperkara.com/wp-includes/images/crystal/www.ups.com/one-to-one/ where the phishing begins with what appears to be a genuine UPS tracking page.

The next screens asks for your email address, password from your UPS account and phone number after filling in the tracking details.

7 thoughts on “Phishing emails regarding UPS parcel: UPS: Tracking Number Notification

  1. I got one today saying :

    <<<<<<<<<<<<<<<<<<<<<<<<<<<<
    ——– Message original ——–
    Sujet: UPS Delivery Ivnoice
    Date : Sat, 12 Jan 2013 01:57:59 -0600
    De : UPS Post
    Pour :

    UPS
    International
    Delivery Information

    Tracking number : 4198111609805996 [Track this delivery]

    Number of packages : 1

    UPS Service : Express

    Weight : 4.2

    Please note that in case of a failure to contact your local UPS office within 21 days the parcel will be returned to sender.

    Copyright A© 1994-2013 United Parcel Service of America, Inc. All rights reserved.
    >>>>>>>>>>>>
    I didn’t follow the link and check for phishing through UPS abuse, and eventually reached your site, which I am thankfull

    • GOT ONE LIKE THE LAST ONE:

      spotted today in junk file but it was also sent on jan 12th :

      Delivery Information

      Tracking number : 2Z3326544956219539 [Track this delivery]

      Number of packages : 1

      UPS Service : Express

      Weight : 0.3

      Please note that in case of a failure to contact your local UPS office within 21 days the parcel will be returned to sender.

      tried the link but got nowhere

      ???

  2. Am 16.07.2013 um 13:25 schrieb “UPS Parcel Service” :

    Dear Customer,

    Your Parcel has been returned to the UPS office nearest to you.
    The reason for the return is as a result of incorrect delivery address information.
    Kindly click on the below link to update us with your Mobile Number and in less than (42 hours) an agent will contact you on phone to correct your delivery address to enable delivery of parcel.

    To update us with your Mobile Number, please Click Here and enter the below tracking number of Parcel.

    Tracking # ( 1Z9575R2P297341747 )

    Note: Ensure you enter your correct email information and Mobile Number to enable us reach you on phone.

    UPS Logistic Service.
    ****************************** *
    Copyright © 1994-2013 United Parcel Service of America, Inc. All rights reserved

Comments are closed.