Beware of fake emails from DHL – they look like real ones



We have 2019, and to this day no tight email system has been created that would be able to eliminate all emails from fraudsters. The best proof of this is the new cybercriminal campaign against Poles using the services of a DHL courier company.

Dangerous emails allegedly sent by DHL relate to the return of the parcel. The message contains a message (date and parcel numbers may be different):

dhl fake

"Dear Sir or Madam,

We would like to kindly inform you that the order for the return shipment 29857425050 was registered under the number: 7204451298WWW
The parcel will be picked up on November 19, 2019, at scheduled hours from 10:00 to 14:00.
Please print out the attached delivery note.
Printing the waybill is necessary to send the package.
You can track the current status of the order on the website: DHL tracking a shipment

Best Regards,
DHL Parcel "

In the attachment there is infected Excel file acting as a fake return form. Running the file and agreeing to execute the macro by pressing the "print" button results in infecting your computer.

dhl fake

The new form of fraud is particularly dangerous because criminals use it here spoofing. The title of the email shows the domain, which apparently does not have adequate security against this form of impersonation.

Be careful and be sure to warn your loved ones using the services of courier companies against similar crimes on the part of criminals.