Dangerous emails allegedly sent by DHL relate to the return of the parcel. The message contains a message (date and parcel numbers may be different):
"Dear Sir or Madam,
We would like to kindly inform you that the order for the return shipment 29857425050 was registered under the number: 7204451298WWW
The parcel will be picked up on November 19, 2019, at scheduled hours from 10:00 to 14:00.
Please print out the attached delivery note.
Printing the waybill is necessary to send the package.
You can track the current status of the order on the website: DHL tracking a shipment
In the attachment there is infected Excel file acting as a fake return form. Running the file and agreeing to execute the macro by pressing the "print" button results in infecting your computer.
The new form of fraud is particularly dangerous because criminals use it here spoofing. The title of the email shows the domain dhl.com, which apparently does not have adequate security against this form of impersonation.
Be careful and be sure to warn your loved ones using the services of courier companies against similar crimes on the part of criminals.