E-Mail From My Son Re Computer Virus. Says it's no hoax

[monmouth]

EMAIL VIRUS WARNING - No Hoax
Thought I would pass this on. This from the owner/admin of a motorcycle forum I belong to. He works for the military and is pretty computer savvy so this would be legit.




I just got an email that looked like it was from UPS. I am in network security and pretty good at spotting a virus attached to an email. That being said, this one ALMOST got me.

The subject of the email is: Postal Tracking #89Y1G681829LWYI

The body of the email is:

Hello!

We were not able to deliver postal package you sent on the 14th of March in time because the recipient’s address is not correct.
.
Please print out the invoice copy attached and collect the package at our office.

Your United Parcel Service of America

The email has an attachment called UPS_NR1.zip and opens up into an exe file. The exe file has the payload.

Be on the look out for an email like this and delete it if you get it.

[atreides1]

1. I do shipping and receiving

And can tell you that most UPS tracking numbers begin with 1Z and end with four numbers.

[SecularMotion]

3. And UPS wouldn't use a "Postal tracking" number. nt

[vaberella]

8. True...but a lot of people wouldn't know the difference. n/t

[Lone_Star_Dem]

2. Is this the Agent.JEN Trojan?

If so it's real and has been circulating for almost a year now.

[pacalo]

4. Thanks, but it should be rather easy to distinguish what was & wasn't ordered?

Plus, as a long-time UPS patron, I know that tracking orders begin with "1Z" & I like to use their website.

There should be a special place in cyber hell for those whose joy in life is to cause cyber miseries for others.

[MADem]

5. It is real. SNOPES says so, and they usually get this stuff right.

http://www.snopes.com/computer/virus/ups.asp

[valerief]

6. Never open an unsolicited email zip file. nt

[vaberella]

7. Thanks for letting us know...I contacted my friends and family abou that virus. n/t

[monmouth]

9. My pleasure...n/t

[TwilightZone]

10. It's been around for several months.

The e-mail warning has made the rounds a few times now. The e-mail does, in fact, contain a virus.

The general rule is to never open an .exe file attachment unless you're absolutely positive that it's legit.