The United States Postal Service has issued a warning for users to beware of fraudulent USPS delivery failure notices being sent by internet crooks as they likely contain malware.
Cybercriminals are doing their best to trick unsuspecting users into opening the fake delivery notice and its malicious contents by spoofing the sender’s email address to make it appear as if the email was sent from’ email@example.com’.
Inside, the bogus USPS delivery failure notice reads:
From: United States Postal Service (firstname.lastname@example.org)
Subject: USPS Delivery Failure Notification
Unfortunately we failed to deliver the postal package you have sent on the
12th of November in time because the recipient’s address is erroneous.
Please print out the shipment label attached and collect the package at our
United States Postal Service
The attached file, “USPS report.zip” is not a shipping label as the email claims, but it does contains the virus that the spammer is hoping you opt to download and open on your machine.
If you receive this fake USPS delivery notice email, it is recommended that you delete it from your inbox and go about your day. The USPS is already aware of the problem and they’re doing their best to figure out who’s behind these malicious emails and bring them to a stop.