Advertisement
Kasha

Canada Post spam email tricks people into downloading execut

Apr 3rd, 2012
1,214
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.78 KB | None | 0 0
  1. There is an email being sent out saying it is from Canada Post regarding a failed Scheduled package delivery and has a link for more information. However that link is to an executable pif file.
  2. The links in the following email ACTUALLY go to hxxp://www.wfh.webz.cz/e107_files/cache/pdf_tracking_invoice.pif
  3.  
  4. Also notice how it does NOT say "your" (my) name?
  5.  
  6. Urgent: Scheduled package delivery failed!Tuesday, April 3, 2012 2:27 PM
  7. From Canada Post Tue Apr 3 11:27:26 2012
  8. X-Apparently-To: ***************** via 98.136.183.128; Tue, 03 Apr 2012 11:27:34 -0700
  9. Return-Path: <service-epost@canadapost.ca>
  10. Received-SPF: none (domain of canadapost.ca does not designate permitted sender hosts)
  11. X-Originating-IP: [216.139.224.116]
  12. Authentication-Results: mta1463.mail.mud.yahoo.com from=canadapost.ca; domainkeys=neutral (no sig); from=canadapost.ca; dkim=neutral (no sig)
  13. Received: from 127.0.0.1 (EHLO ldc325.aus.us.siteprotect.com) (216.139.224.116) by mta1463.mail.mud.yahoo.com with SMTP; Tue, 03 Apr 2012 11:27:34 -0700
  14. Received: (qmail 919 invoked from network); 3 Apr 2012 12:27:26 -0600
  15. Received: from 173-10-50-105-michigan.hfc.comcastbusiness.net (HELO User) (173.10.50.105) by strutcreative.com with SMTP; 3 Apr 2012 12:27:26 -0600
  16. Reply-To: <office-packages@canadapost.ca>
  17. From: "Canada Post"<service-epost@canadapost.ca> Add sender to Contacts
  18. Subject: Urgent: Scheduled package delivery failed!
  19. Date: Tue, 3 Apr 2012 14:27:26 -0400
  20. MIME-Version: 1.0
  21. Content-Type: text/html; charset="Windows-1251"
  22. Content-Transfer-Encoding: 7bit
  23. X-Priority: 3
  24. X-MSMail-Priority: Normal
  25. X-Mailer: Microsoft Outlook Express 6.00.2600.0000
  26. X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
  27. Content-Length: 1538
  28.  
  29. We attempted to deliver your item at 08:50 am on April 03th, 2012.
  30. The delivery attempt failed because nobody was present at the shipping address, so this notification has been automatically sent.
  31. You may arrange redelivery by visiting the link below or pick up the item at the Canada Post Office indicated on the receipt.
  32. If the package is not scheduled for redelivery or picked up within 48 hours, it will be returned to the sender.
  33. Label/Receipt Number: 72842684284
  34. Expected Delivery Date: April 03th, 2012
  35. Class: Package Services
  36. Service(s): Delivery Confirmation
  37. Status: eNotification sent
  38.  
  39. To download the shipping receipt, in PDF format, visit:
  40. http://www.canadapost.ca/cpotools/apps/track/personal/findInvoiceByPackageId.aspx?id=3276346277495
  41.  
  42. To check on the delivery status of your mailing or arrange redelivery please visit the following URL:
  43. http://www.canadapost.ca/cpotools/apps/track/personal/findByTrackNumber?execution=e9s1
  44.  
  45. Thank you,
  46. © 2012 Canada Post Corporation.
  47. *** This is an automatically generated email, please do not reply ***
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement