Threat Outbreak Alert

Threat Outbreak Alert: Fake Delivery Information Notification Email Messages on August 19, 2016

Threat Type:

IntelliShield ID:

33326

Version:

49

First Published:

2014 March 12 22:47 GMT

Last Published:

2016 August 22 15:21 GMT

Urgency:

Credibility:

Severity:

Version Summary:

Cisco Security has detected significant activity related to spam email messages that claim to contain shipment delivery information for the recipient. The text in the email message attempts to convince the recipient to open the attachment for details. However, the attachment contains a malicious file that, when executed, attempts to infect the system with malicious code.

Email messages that are related to this threat (RuleID3900 and RuleID3900KVR) may contain the following files:

    FedEx_D1FDE69L6R.PDF.zip
    FedEx_D1FDE69L6R.PDF.exe
    FedEx Delivery Document pdf.zip
    FedEx Delivery Document pdf.exe
    DHL (2).zip
    soft4_crypt_QiTwm540e299e086b8.exe
    ups-145732459880.zip
    ups-145732459880.exe
    ups-145731323112.zip
    ups-145731323112.exe
    dhl.zip
    dhl.exe
    DHL DELIVERY TRACKING.zip
    DHL DELIVERY TRACKING.exe
    DHL EXPRESS DELIVERY ATTEMPT FOLDER.zip
    DHL EXPRESS DELIVERY ATTEMPT FOLDER.exe
    DHL_2.zip
    DHL Express International.zip
    DHL Express International.exe
    USPSreceipt.zip
    monthlyreport.exe
    usps.zip
    Fedex.zip
    4436457878232445.scr
    DHL.scr
    DHL.zip
    order.exe
    USPS_Attachment_02_03_2015 Ind.exe
    USPS_Attachment_02_03_2015.zip
    443645787823424455.scr
    DOC_20150309001163879152-pdf.exe
    DHL-20150309001163879152-pdf.zip
    43412030384582366.scr
    Fedex-43412030384582366.zip
    547532340983236.scr
    DHL SCAN COPY.exe
    DHL SCAN COPY.zip
    USPS1095479.zip
    USPS04142015.scr
    USPS93374261.zip
    USPS93374261.exe
    DHL SHIPMENT.zip
    DHL SHIPMENT.exe
    FedEx Tracking Number.zip
    FedEx Tracking Number.exe
    DHL Express.zip
    DHL Express.exe
    N88472923.scr
    DHL AWB 122376499 shipment.pdf.zip  
    DHL AWB# 33 5673 0015 shipment.zip
    payment.exe
    UPS-Tracking Number 1Z2342580355520887.zip
    sirovvvv.exe
    DHL Shipment Doc.zip
    Informazioni FedEx.zip
    N9500495599.scr
    FedEx_report_update_ref.24911954.zip
    FedEx_report_update_ref.76654396.pdf1.exe
    DHL documents .zip
    fallazfile.scr
    dhl16112015_6987878544212.zip
    dhl16112015_6987878544212.exe
    DHL9.zip
    DHL9.scr
    DHL1.zip
    DHL1.scr
    DHL010201602PDF.zip
    DHL010201602.exe
    DHL COMMERCIAL INVOICE,pdf.zip
    DHL COMMERCIAL INVOICE,pdf.exe
    DHL awb no 9760541151.zip
    DHL awb no 9760541151.exe
    DHL&AWB=5421365062.zip
    DHL&AWB=5421365062.exe
    DHL PARCEL DOC ATLAS SHIP 38838__pdf__pdf.zip
    DHP PARCEL DOC 38838__pdf__pdf.exe
    AWB-dhl-P.O-4262016.zip
    romoa.exe
    DHL_id57169178.zip
    Paket_id3479313.js
    DHL FILE.zip
    DHL FILE.exeDHL
    ParcelShipment.zipDHL
    ParcelShipment..scr
    DHL ParcelShipment.zip
    DHL ParcelShipment.scr
The FedEx_D1FDE69L6R.PDF.exe file in the FedEx_D1FDE69L6R.PDF.zip attachment has a file size of 110,592 bytes. The MD5 checksum, which is a unique identifier of the executable, is the following string: 0xCB83F9438C11DC73F2DB9538DA8B1EBA

The FedEx Delivery Document pdf.exe file in the FedEx Delivery Document pdf.zip attachment has a file size of 372,736 bytes. The MD5 checksum is the following string: 0xFF03749B1A2906E82BF06B7FE92A8617

The soft4_crypt_QiTwm540e299e086b8.exe file in the DHL (2).zip attachment has a file size of 357,118 bytes. The MD5 checksum is the following string: 0x7C0C6F33F7BA1BF82F3FC9ED8A692D06

The ups-145732459880.exe file in the ups-145732459880.zip attachment has a file size of 258,560 bytes. The MD5 checksum is the following string: 0xAEFC01C9E3B136FA78A6F413AC10EBF4

The ups-145731323112.exe file in the ups-145731323112.zip attachment has a file size of 274,944 bytes. The MD5 checksum is the following string: 0x98C5C2C1415AFD95D8654E1A0CA96767


The dhl.exe file in the dhl.zip attachment has a file size of 1,053,105 bytes. The MD5 checksum is the following string: 0x741845A7E7F372663D91F1CB19C294A2

The DHL DELIVERY TRACKING.exe file in the DHL DELIVERY TRACKING.zip attachment has a file size of 620,544 bytes. The MD5 checksum is the following string: 0x3F649ECD4FEA5F420937AA40CD43DBDD

The DHL EXPRESS DELIVERY ATTEMPT FOLDER.exe file in the DHL EXPRESS DELIVERY ATTEMPT FOLDER.zip attachment has a file size of 244,937 bytes. The MD5 checksum is the following string: 0x12D1B4EDA9F877A25384EB4A65FBEF41

A varient of the DHL.exe file in the DHL_2.zip attachment has a file size of 725,064 bytes. The MD5 checksum is the following string: 0x4543E8E355FC61A2C75ABF1416A32642

The DHL Express International.exe file in the DHL Express International.zip attachment has a file size of 915,971 bytes. The MD5 checksum is the following string: 0xD3B3DAF9B678E4D09E469BE8DB5C1E73

The monthlyreport.exe file in the USPSreceipt.zip attachment has a file size of 591,360 bytes. The MD5 checksum is the following string: 0x4CFC451E3AC1F04FD13F3DB2D7F917B7

A variant of the monthlyreport.exe file in the usps.zip attachment has a file size of 590,848 bytes. The MD5 checksum is the following string: 0x1522C23F22EAAFCC600FC58F79B36918

The 4436457878232445.scr file in the Fedex.zip attachment has a file size of 77,824 bytes.The MD5 checksum is the following string: 0x55260D72CF4B155C47F58795222D144B

The DHL.scr file in the DHL.zip attachment has a file size of 499,712 bytes.The MD5 checksum is the following string: 0xB214B86BCDE6EEB19456A87805CABC90

The order.exe file in the DHL.zip attachment has a file size of 811,008 bytes.The MD5 checksum is the following string: 0x1F90C56F8BBDD3AB29DFD32C266A838C

The USPS_Attachment_02_03_2015 Ind.exe file in the USPS_Attachment_02_03_2015.zip attachment has a file size of 573,440 bytes.The MD5 checksum is the following string: 0x840392C39C971265284305332E95C748

The 443645787823424455.scr file in the Fedex.zip attachment has a file size of 178,176.The MD5 checksum is the following string: 0x8D17F9552711356B4FD142C9F86DF9F9

The DOC_20150309001163879152-pdf.exe file in the DHL-20150309001163879152-pdf.zip attachment has a file size of 361,472 bytes.The MD5 checksum is the following string: 0xB468C7E151D6E8A39F9B95BAB6955DA1

The 43412030384582366.scr file in the Fedex-43412030384582366.zip attachment has a file size of 73,728. The MD5 checksum is the following string: 0xB0FEF78B742FB091683D0BD32F415299

The 547532340983236.scr file in the Fedex.zip attachment has a file size of 65,536 bytes. The MD5 checksum is the following string: 0xD59EF204166024BF573AE059695B2D94

A variant of 547532340983236.scr file in the Fedex.zip attachment has a file size of 65,536 bytes. The MD5 checksum is the following string: 0x267850DAD7BA862C28E60306C8F83AE1

The DHL SCAN COPY.exe file in the DHL SCAN COPY.zip attachment has a file size of 668,672 bytes. The MD5 checksum is the following string: 0x44DD3CEB683AE3CA5C2448A334A8A078

The USPS04142015.scr file in the USPS1095479.zip attachment has a file size of 47,616 bytes. The MD5 checksum is the following string: 0x211FFC1DF0251827FDABC40A62939097

The USPS93374261.exe file in the USPS93374261.zip attachment has a file size of 1,241,088. The MD5 checksum is the following string: 0x9A675C00BDB55A8BA90FA67042A077B5

A variant of DHL SCAN COPY.exe file in the DHL SCAN COPY.zip attachment has a file size of 738,304. The MD5 checksum is the following string: 0xBB0F46D257F8705DE44C656BED5E62AF

The DHL SHIPMENT.exe file in the DHL SHIPMENT.zip attachment has a file size of 920,064 bytes. The MD5 checksum is the following string: 0xF20A33FF1E0428887433332357B4B71F

A third varient of the DHL.exe file in the DHL.zip attachment has a file size of 542,208 bytes. The MD5 checksum is the following string: 0xFBA2B3F51C06998EE4F6E383C19B9A87

The FedEx Tracking Number.exe file in the FedEx Tracking Number.zip attachment has a file size of 1,728,512 bytes. The MD5 checksum is the following string: 0x66B1F6936C36FBFE5CF1417201D67C58


The DHL Express.exe file in the DHL Express.zip attachment has a file size of 1,282,560 bytes. The MD5 checksum is the following string: 0x3DBEFC3BE3336625994B6A4C3C6BB9FB


The N88472923.scr file in the FedEx.zip attachment has a file size of 508,928 bytes. The MD5 checksum is the following string: 0xA64BFF1CC5CD63F026AF63F4563A5221

A variant of the Order.exe file in the DHL AWB 122376499 shipment.pdf.zip attachment has a file size of 625,664 bytes. The MD5 checksum is the following string: 0xB76AD09C9BB5D975F1FBEEB7F7C199ED

The payment.exe file in the DHL AWB 3356730015 shipment.zip attachment has a file size of 1,224,324 bytes. The MD5 checksum is the following string: 0xE5C5DDB04CC78FE6B8C7FBD3AC790D8D

The sirovvvv.exe file in the UPS-Tracking Number 1Z2342580355520887.zip attachment has a file size of 860,512 bytes. The MD5 checksum is the following string:
0xEC66A78788CB9bA67B2BF620BCDAB016

A fourth variant of the dhl.exe file in the DHL Shipment Doc.zip attachment has a file size of 1,044,992 bytes. The MD5 checksum is the following string: 0x394C0005328381B1509A76D04CD5F44C

The N9500495599.scr file in the Informazioni FedEx.zip attachment has a file size of 321,024 bytes. The MD5 checksum is the following string: 0x86F255B0117C1349205131C01EC2172A

The FedEx_report_update_ref.76654396.pdf1.exe file in the FedEx_report_update_ref.24911954.zip attachment has a file size of 252,416 bytes. The MD5 Cheecksum is the following value: 0x5EE0FA9AAA035CA0E9E3E5FFF281F312

The fallazfile.scr file in the DHL documents .zip attachment has a file size of 613,376 bytes. The MD5 Checksum is the following value: 0xED19BA09D1CACD75060DDD0E50D93804

The dhl16112015_6987878544212.exe file in the dhl16112015_6987878544212.zip attachment has a file size of 34,816 bytes. The MD5 checksum is the following string: 0x06A4059DA943B09F13AB2909824968DE

The DHL9.scr file in the DHL9.zip attachment has a file size of 81,920 bytes. The MD5 checksum is the following string: 0xF408F53A4E016F8F0201AEBCE95CE232

The DHL1.scr file in the DHL9.zip attachment has a file size of 81,920 bytes. The MD5 checksum is the following string: 0x242E8D5E03971DB3738F596C281CCE91

The  DHL010201602.exe file in the DHL010201602PDF.zip attachment has a file size of 308,224 bytes. The MD5 checksum is the following string: 0xF7DAD7911F33FBA2B34E28B02CF0887D

The DHL COMMERCIAL INVOICE,pdf.zip file in the  DHL COMMERCIAL INVOICE,pdf.exe attachment has a file size of 520,704 bytes. The MD5 checksum is the following string: 0xE8823C220EBB74B158D4C392F7A99E2D

The DHL awb no 9760541151.zip file in the DHL awb no 9760541151.exe attachment has a file size of 172,032 bytes. The MD5 checksum is the following string: 0x66199E2E2D630460E0E93F28300535F6

The DHL&AWB=5421365062.zip file in the DHL awb no 5421365062.exe attachment has a file of  944,640 bytes.The MD5 checksum is the following string: 0x2B2F3B6281F2F2E99B90B15E13B30062

The DHL PARCEL DOC ATLAS SHIP 38838__pdf__pdf.zip file in the DHP PARCEL DOC 38838__pdf__pdf.exe has a file size of 643,800 bytes. The MD5 checksum is the following string:  0xB6EBB346AC834D73F6883DAA454E026A

The AWB-dhl-P.O-4262016.zip file in the romoa.exe attachment has a file size of 438,272 bytes. The MD5 checksum is the following string: 0x004F8BA6B05C477A886C7FE951C7297A

The size of the Paket_id3479313.js file in the DHL_id57169178.zip attachment is not available. The MD5 checksum is the following string: 0x2BE1C2C158F74B04C4A5FDFF7179C001

The DHL FILE.zip file in the DHL FILE.exe attachment has a file size of 1,166,848 bytes. The MD5 checksum is the following string: 0xEDADDDAD18F7C486CC21EAA12F5767F2

The DHL ParcelShipment.zip file in the DHL ParcelShipment..scr attachment has a file size of 1,981,952  bytes. The MD5 checksum is the following string: 0xA495868F8AB111BFA1838EEFCB3ACEF8

The DHL ParcelShipment.zip file in the DHL ParcelShipment.scr attachment has a file size of 636,416 bytes. The MD5 checksum is the following string: 0x40aF613CABB69EBDA8EE468CB5300180

The following text is a sample of the email message that is associated with this threat outbreak:
Subject: Some significant info is lost
Message Body:

FEDEX VERIFICATION Dear shart
Our company have a pack for you! Regrettably some significant info is missing to conclude the delivery.
Please meet the documents binded to verify your personality.
Fedex highly recommend you to do it right now!! You have 24 hours to compleate the confirmation!
Otherwise the package will be returned to sender!
Order confirmation number: 31200733
Order date: Wed, 12 Mar 2014 16:57:56 +0100 Thank you for choosing FedEx.
This note has been sent by an auto responder system. Please do not reply to this note!
The content of this message is protected by copyright and trademark laws under U.S!
and international law. Review our privacy policy! All rights reserved!

Or
Subject: FedEx Pickup Confirmation
Message Body:

Dear customer.
A parcel was sent to your home address.
 it will arrive within 3 business day.
More information and the tracking number are attached in the document.
Please do not respond to this message. This email was sent from an unattended mailbox.
This report was generated at approximately GMT on 25/08/2014.
To learn more about FedEx Express, please visit our website at fedex.com.
All weights are estimated.
To track the latest status of your shipment, click on the tracking number above, or visit us at fedex.com.
This tracking update has been sent to you by FedEx on the behalf of the Request or noted above.
FedEx does not validate the authenticity of the requestor and does not validate,
guarantee or warrant the authenticity of the request, the requestor's message,
or the accuracy of this tracking update.
For tracking results and fedex.com terms of use, go to fedex.com.
Thank you for your business.
FedEx Customer Service

Or
Subject: 10 messages. 9/9/2014 7:57:17 AM
Message Body:

At the request of the shipper, please be advised that delivery of the following shipment has been rescheduled.
Important Delivery Information UPS Discover more about UPS:
Visit ups.com Tracking Number: 145732459880
Rescheduled Delivery Date: 22-09l-2014
Exception Reason: THE CUSTOMER WAS NOT AVAILABLE ON THE 1ST ATTEMPT.
A 2ND ATTEMPT WILL BE MADE Exception Resolution: PACKAGE WILL BE DELIVERED NEXT BUSINESS DAY.
Shipment Detail 145732459880 attached to the letter.

Or
Subject: Copy of AWB

Message Body:

Good day
Attached is the Shipping documents and BL kindly confirm if the address is OK.
We have sent you DHL envelope and DHL TRK# NO : 7711 2149 1384
Original copy of Bill of Lading and other relevant documents for clearing of consigment in your port.
Attached is a scanned copy of the docs.
Regards,

Or
Subject: Dhl Delivery Attempt ..

Message Body:

We attempted to deliver your item at 17:32pm on October 7th, 2014.
The delivery attempt failed because nobody was present at the shipping address,
so this notification has been automatically generated.
You may rearrange delivery by visiting the link on the attached document or
pick up the item at the DHL depot/office indicated on the receipt attached.
If the package is not rescheduled for delivery or picked up within 48 hours,
it will be returned to the sender.
Airway Bill No: 7808130095
Class: Package Services Service(s)
Delivery Confirmation Status: eNotification sent
Print this label to get this package at our depot/office.
Thank you

Or
Subject: DHL Express Tracking Notification

Message Body:

DHL Express Tracking Notification: Custom.
Reference: TF2APLTEGGQAN 65290
Type: First Class Service: AIR Pieces: 1
WE PLEASED TO INFORM YOU THAT
YOUR PARCEL WAS NOT DELIVERED DUE TO INCORRECT ADDRESS.
PLEASE REFER TO ATTACHED FILE FOR 
DETAILED INFORMATION WITH TRACKING NUMBER AND
PRINT THE SHIPPING LABEL ATTACHED TO PICK UP YOUR PARCEL
IN THE NEAREST DHL OFFICE CLOSE TO YOU.
Please do not reply to this email.
This is an automated application used only for sending proactive notifications
Thanks,

Or
Subject: USPS Parcel Receipt

Message Body:

Dear Client,
We noticed a parcel was left at our office
for you and the address on file keeps showing wrong address.
We hereby advise that you download the receipt of the parcel and reconfirm
the correct address for us to deliver your parcel to you.
Thanks,

Or
Subject: Orson Hartman agent Fedex

Message Body:

Dear Customer,
We tried to deliver your package on February 12th, 2014, 11:45 AM.
The delivery attempt failed because the address was
 business closed or nobody could sign for it.
To pick up the package,please, print the invoice that is
attached to this email and visit Fedex office indicated in the invoice.
If the package is not picked up within 48 hours, it will be returned to the sender.
Label/Receipt Number: 4436457878232445
Expected Delivery Date: February 12th, 2014
Class: International Package Service Service(s): Delivery Confirmation
Status: Notification sent
Thank you

Or
Subject: -SHIPMENT NOTIFICATION-  

Message Body:

Dear Sir,
Your package with Dhl remains unclaimed after a while now,
kindly refer to attached and fill out how to deliver your package.  
Treat as urgent.

Or
Subject: DHL MISSED PACKAGE DELIVERY

Message Body:

We attempted to deliver your item at 17:32pm on Feb 26th, 2015.
The delivery attempt failed because nobody was present at the shipping address,
 so this notification has been automatically generated.
You may rearrange delivery by visiting the link on the attached document
or pick up the item at the DHL depot/office indicated on the receipt attached.
If the package is not rescheduled for delivery or picked up within 48 hours,
it will be returned to the sender.
Airway Bill No: 7808130095
Class: Package Services Service(s): Delivery Confirmation
Status: eNotification sent
Print this label to get this package at our depot/office.
Thank you

Or
Subject: USPS .COM  

Message Body:

Notification Our courier couldn't make the delivery of parcel to you at March 1st 2015.
Print label and show it in the nearest post office to claim your parcel. Download the attachment.
Print out the Shipping Label NOW

Or
Subject: Gabriel Oneal agent Fedex 
Or
Message Body:  

Gentile cliente,
Abbiamo tentato di consegnare il tuo articolo il 18 marzo 2015, 10:50 AM.
Il tentativo di recapito fallito, perche nessuno era presente nel indirizzo di spedizione,
in modo tale notifica e stata inviata automaticamente.
Puoi sistemare riconsegna visitando il link  sottostante o prendere l'oggetto
al piu vicino ufficio postale di consegna indicato sulla ricevuta.
Se il pacchetto non e prevista per la riconsegna o ritirati entro 48 ore,
verra restituita al mittente.
Etichetta/Numero della ricevuta: 434120303848236
Data di consegna prevista: 18 marzo 2015
Classe: servizi del pacchetto internazionali servizio(i): la conferma di consegna
Stato: Notifica inviata
Per controllare lo stato di consegna del vostro pacchetto o organizzare

Or
Subject: Edward Preston agent Fedex
Or
Subject: August Sims agent Fedex
Or
Subject: DHL AWB# 34 5673 0015 / SHIPMENT

Message Body:   

The following 1 piece(s) have been sent by a Customer via DHL Express
on 09-04-2014 via AWB# 96 0127 8831
Find attached Scanned copy of the Docs and more information about
the parcel If you wish to track this(these)
shipment(s) please contact your local DHL customer service office
or visit the DHL Web Site at hxxp: //www.dhl.com
If you have a Web-enabled mail reader,
click the link below to view shipment tracking details:
hxxp://www.dhl.com/en/express/tracking.html?AWB=9601278831&brand=DHL
Find attached Scanned copy of the Docs and more information about the parcel

Or
Subject: Invoice No: 0528377

Message Body:

Good Day,
Kindly find the attached revised invoice, emailing as per directive from my manager.
Thanks with kind regards,

Or
Subject: SWIFT: Payment Maker 103 - 13.07.15

Message Body:

Dear customer,
You have a parcel with DHL Express.
Kindly find attached your parcel details, current status of this shipment and tracking details in the attached doc file.
If you have any questions, please do not hesitate to contact us or reply to this e-mail.
Regards 

Or
Subject: DHL AWB# 33 5673 0015 / shipment

Message Body:

FYI
Find attached
Or
Subject: UPS Ship Notification, Tracking Number 1Z2342580355520887

Message Body:

UPS
Dear Customer,
This message was sent to you at the request to notify you about the error in your shipment information.
The physical package(s) was not delivered due incorrect address. To verify the actual address for your
shipment,Check the attached as soon as possible.
Regards,
Or

Subject: FedEx Shipment Notification

Message Body:

_____________________________________________________________
This tracking update has been requested and attached to this email
_____________________________________________________________
Reference information includes: Invoice number,
Reference, Special handling/Services, Residential Delivery. 
Reference information is attached to this email.
Tracking number:  111374758031
To learn more about FedEx Express, please visit our website at fedex.com.
This tracking update has been sent to you by FedEx on the behalf of the
Requestor noted above. 
FedEx does not validate the authenticity of the requestor and does not validate, 
guarantee or warrant the authenticity of the request, the requestor's message,
or the accuracy of this tracking update. 
For tracking results and fedex.com's terms of use, go to fedex.com.
Thank you for your business.


Or
Subject: Your DHL Documents

Message Body:

Good Morning,
We are pleased to inform you that DHL have picked up your shipment this
morning.
Attached is the AWB, Invoice and Packing List for your perusal.
Kindly acknowledge when you received my email.
Thank you.
Best Regards,
Or
Subject: DHL Express - Credit Card Billing Adjustment. Ref# 8992274

Message Body:

DHL Express Customer:
The attached file details adjustments that have been made to shipping charges
originally billed to your credit card. These adjustments are for charges or credits
that have occurred after the initial processing of your shipment(s).
These adjustments have been applied to your credit card and will appear on your next credit card statement.
All shipments are subject to the terms and conditions contained in the
DHL Express Tariff and the DHL Express Terms and Conditions of Service,
which can be found at www.dhl.com
If you have questions regarding these adjustments please contact the DHL Express Customer Service.
We can be reached at 1-800-DHL-ASAP (1-800-345-2727), or you may reply to this e-mail directly.
Please allow one business day for e-mail inquiries.
Please note: the attached file is in PDF format. If you are unable to open the attached file,
please download the free Adobe Acrobat Reader by entering the following address in your web browser:
hxxp://www.adobe.com/products/acrobat/readstep.html


Or
Subject: Returned Parcel

Message Body:

We have tried to deliver a package to you because of wrong address
We where  not able to deliver.
Attached is the tracking number and a copy of the reciept,
you are to print it out then take it to our  nearest office for the Collection.

Thanks for choosing DHL

Or

Subject: eNotification: Label Number:DHL010201602[*]

Message Body:

Dear customer,
We attempted to deliver your item at 10:10 AM on Wednesday 10th 2016. (Read
enclosed file detail)
The delivery attempt failed because nobody was present at the shipping
address, so this notify has been automatically sent.
If the parcel is not scheduled for redelivery or picked up within 72
hours, it will be returned to the sender.Parcel detail enclosed here
Label Number: DHL010201602
Expected Delivery Date: 10:10 AM on Wednesday 10th 2016
Class: Package Services
Service(s): Delivery Confirmation
Status: eNotification sent
Read the enclosed file for details.
Thanks for shipping with us ,


Or

Subject: DHL COMMERCIAL INVOICE

Message Body:

We tried to deliver your package at 04:15 PM on 22/02/16
The delivery attempt failed because nobody was present at
the shipping address, so this notification has been 
automatically sent.If the parcel is not scheduled for
re-delivery or picked up within 72 hours,it will be returned
to the sender.Please check attached file for tracking details
and schedule another delivery time.Do not hesitate to contact
us for further assistance.
Best regards,


Or

Subject: KCH SHIPMNET ETD 11/3

Message Body:

Dear
Please find enclosed for soft copy inv. & packing list,
certificate of fumigate and CIDB copy for your reference.
For the original CIDB I sent you today via DHL awb no:
9760541151. Kindly see shipment schedule below ;
INV. 2471001675 total 3 con, Kuching port
FEEDER: KOTA HARTA V.HAR298
MOTHER VESSEL : KOTA TEGAP V.1021
LOADING DATE   : 09/03/2016
ETD: 11/03/2016
ETA: 23/03/2016
Thank you and best regards
,

Or

Subject: DHL Courier Service Notification Arrival

Message Body:

DHL EXPRESS
SHIPMENT ADVISORY
The following 1 piece(s) have been sent by Mohammed Meraj Ahmed
from Flexible Packaging Company via DHL Express on 29-03-2016 via AWB# 5421365062
If you wish to track this(these) shipment(s) please contact your local
DHL customer service office or visit the DHL Web Site at
http: //www.dhl.com.sa
If you have a Web-enabled mail reader, 
click the link below to view shipment tracking
details: http: //www.dhl.com.sa/content/sa/en/express/tracking.shtml?brand=DHL&AWB=5421365062
SHIPMENT TO: TO YOUR COMPANY
SHIPMENT FROM:
Flexible Packaging Company


Or

Subject: Parcel Documents from Atlas ships -Ref:9382

Message Body:

Dear Sir/Ma,
Attn: Your parcel has arrived our head office this morning .
please find the attached scanned copy of the docs.
Also the AWB#5735574736 of the original documents sent to your 
office.Kindly follow the instruction as attached  for your tracking,
claims and shipping documents
Thanks for your patronage


Or
Subject:  Original Delivery-BL/PO/PI0101011090//kindly reminder-payment-urgent‏

Message Body:

Dear Sir,
Please see the AWB and invoice attached for the shipment we are trying to clear through customs.
Can you please view the attached to confirm the correct importers bill to
address for the customs entry as there will be VAT to pay on this shipment.

Thank you.

Or
Subject: Ihre Paket ist am lager.

Message Body:

Guten Tag
Ihr Paket id66318176 ist empfangsbereit.
Diese e-mail ist eine Mitteilung für die Ankunft.
Lieferung durch den Absender gezahlt.
Die Hohe der Versicherungspaket ^ 2.350.
Um das Sendung zu bekommen , bitte drucken Sie das angehangte Dokument und prasentieren Sie in einem Lagerhaus.
Or

Subject: YOUR PACKAGE DELIVERY IS CONFIRMED TODAY

Message Body:

This is to inform you that we have had a consignment in the name of this your email.
We are in conjunction with the FEDEX,DHL,USPS and We are to confirm that this consignment
is in your name too and being delivered in regards to a transaction you were having.
Now we need to confirm you are the true beneficary of the said package.You are not to pay 
a dime more on this delivery for everything has been taken care of.You will be getting your
delivery and your fund today without any further delay. We understand you have gone through 
a lot to get your fund and now we are 100% sure you will get your package delivered within 24 hours
.

Or

Subject: Your DHL Parcel/Shipment.

Message Body:

Dear customer,
Your Parcel arrived our office last week.
Our courier was unable to deliver the parcel to your address.
Kindly proceed to the nearest DHL office to claim your parcel with your mailing label.
The mailing label is attached... Please print.
Endeavour to take along a copy of your identification.
Thank you.
Yours faithfully,


Or
Subject: Your DHL Parcel/Shipment.

Message Body:

Dear customer,
Your Parcel arrived our office last week.
Our courier was unable to deliver the parcel to your address.
Kindly proceed to the nearest DHL office to claim your parcel with your mailing label.
The mailing label is attached. Please print.
Endeavour to take along a copy of your identification.

Cisco security appliances can help protect customers during the critical period between the first exploit of a virus outbreak and the release of vendor antivirus signatures. Cisco Web Security Appliances help secure and control web and email traffic by offering layers of malware protection. Cisco security appliances are automatically updated to help prevent both spam email and hostile web URLs from being passed to the end user.

Related Links
Cisco Security
Cisco SenderBase Security Network

Aliases/Variants

None

Virus Name:

None


Description:

  1. Return to Cisco Security          
  2. Go to Cisco.com