UK users expecting a package are being warned to be wary of emails purporting to come from the UK's Royal Mail. The fake emails are being used by cybercriminals to distribute trojans.
The messages are titled “Mail – Lost/Missing package” and inform recipients that the transport of their postal package has been prohibited, informing them in writing of the reason for the ban and how it can be lifted.
Attached to the email is a zip file, which includes a PDF. And while the file seems harmless, MX LAB experts warn that it contains a trojan downloader. Once it infiltrates the computer, the trojan adds itself to the Windows registry to remain persistent and changes firewall. The malware has the ability to steal credentials of FTP clients and browsers.
To protect yourself from such threats, never open attachments or links in unsolicited emails. If you are expecting a package from Royal Mail or another courier company, make sure the attachment is not a .zip file and that the links contained therein point to the official website.
