Scam Email from DHL.com

[LaserWraith]

I got this spam email:



It is obviously a scam, and there is an file in the attached zip called "FedEx.exe" (is FedEx even associated with DHL?). But I'm interested in how it looks like the email came from the DHL.com domain.

How does that work?

Thanks

 

[Jack]

Yes,definitely spam: http://malwaretips.com/Thread-New-Fake-DHL-Notifications-Spread-Trojans
These guys can't even check the spelling before starting a spam campaing.....
Come "bad guys" use at least google translater
Thank you for letting us know +1Rep

 

[LaserWraith]

I uploaded the attachment to VirusTotal...not great detection:

http://www.virustotal.com/file-scan...72b51a50ff6c9281ed3c82117c0deee0fb-1299867732

CIMA: http://camas.comodo.com/cgi-bin/submit?file=ad394c108e6859eb59bcd81e5663c772b51a50ff6c9281ed3c82117c0deee0fb

I couldn't find anything in the rules about posting malware here, so I attached an encrypted zip file with it.

Password: malware

 

[Tweak]

How does that work?Thanks

One of many potential methods...
http://www.anonymailer.net/default.asp

 

[LaserWraith]

How does that work?Thanks

One of many potential methods...
http://www.anonymailer.net/default.asp

Sometimes Hotmail alerts me saying that it can tell the from address is spoofed. But it didn't this time.

I'll test the service tomorrow.