Back to All Attacks
Attack Details
Attack Date:
Jun 28, 2022

DHL Fake Shipping Notification HTML Attachment Credential Phishing Attack

Initial Email Content

Subject
Shipment Details
Body

Hi,


Please find attached your Shipping documents.


Kindly do the needful.


Regards,


[Third Party Employee Name]

Coordinator, Shipment Office

DHL Express (AE) LLC

Attack Screenshots

No items found.

Malicious Artifacts

Additional Indicators of Compromise

Type

Description

No items found.

Attack Description

This payload-based attack impersonates DHL using a free webmail account and a fake shipping notification theme to steal credentials.

Analysis Overview

Tactic
Free Webmail Account
Goal
Credential Theft
Impersonated Party
Vector
Payload-based
Theme
Fake Shipping Notification
Language