Back to All Attacks
Attack Details
Attack Date:
Jun 28, 2022
DHL Fake Shipping Notification HTML Attachment Credential Phishing Attack
Initial Email Content
Subject
Shipment Details
Body
Hi,
Please find attached your Shipping documents.
Kindly do the needful.
Regards,
[Third Party Employee Name]
Coordinator, Shipment Office
DHL Express (AE) LLC
Malicious Artifacts
Additional Indicators of Compromise
Type
Description
No items found.
Attack Description
This payload-based attack impersonates DHL using a free webmail account and a fake shipping notification theme to steal credentials.
Analysis Overview
Tactic
Free Webmail Account
Goal
Credential Theft
Impersonated Party
Vector
Payload-based
Theme
Fake Shipping Notification
Language