Fake Shipping Notification Link-based Malware Attack

Initial Email Content

Subject

Attention: UPS Shipping Notification

Body

We have issues with your shipment address

Reason: Your shipping address has an error.
It may be caused by different formats that are used in e-shops.

Shipment Details
Email : [email address]
Status: Needs customer's verification
Tracking Number: 1Z0905238580532086
Number of Packages: 1
Scheduled Delivery Date: March, 31 2022
Weight: 2.5 LBS
Please check the document, fill in the form and send it back.

DOCUMENT DOWNLOAD LINK

‍

Attack Screenshots

No items found.

Malicious Artifacts

Additional Indicators of Compromise

Type

Description

No items found.

Attack Description

This link-based attack impersonates a brand using an external compromised account and a fake shipping notification theme to deliver malware.

Analysis Overview

Type

Malware

Tactic

External Compromised Account

Goal

Malware Delivery

Impersonated Party

Vector

Link-based

Theme

Fake Shipping Notification

Language