This email, which purports to be from Australia Post, claims that a dispatch was not delivered to your address because nobody was home.
The email urges you to click a button labelled ‘Get Sending Document” to view information about the delivery. Supposedly, you can print out the information and take it to a post office to collect your parcel.
However, Australia Post did not send the email and clicking the link will not open information about a failed parcel delivery.
Instead, clicking the button opens a website that harbours malware.
The exact nature of this malware can vary. It may be ransomware that locks up your computer’s files and demands that you pay a fee to online criminals for an unlock code. Or it may be designed to steal sensitive login details and other personal information from your computer.
Criminals have repeatedly used fake ‘undelivered parcel’ emails as a means of distributing malware. Similar fake Australia Post emails have been used as a malware vector since at least 2011.
And alternative versions have falsely claimed to be from other high-profile delivery companies including FedEx, USPS, and the Royal Mail.
Be very wary of any email that claims that a parcel delivery failed and that you should click a link or open an attached file to get more information or print a shipping label.Australia Post will never ask you to click a link or button in an email to print off a label to redeem a package. Australia Post has more information about such scams on its website.
An example of the malware email:
Since you’ve read this far…
…can I ask you for a big favour?To enhance your privacy and security and offer you a better user experience, Hoax-Slayer is now ad-free. To keep the site online, I now rely on voluntary contributions from site visitors along with commissions from a few trusted products and services that I promote via reviews on the site.
If you found the above report useful, please consider supporting Hoax-Slayer by making a donation. Any amount you can give will be greatly appreciated.
You can donate using your credit card via the form below. Donations are collected securely via the online payment service Stripe. Stripe uses state of the art security to keep your data safe.
Thank-you.
Brett Christensen