A new phishing scam has surfaced that claims to be from UPS. The spam comes with a word attachment that is malware.

Part of the email, which has the subject line "UPS Tracking Notification", reads in part:


Tracking Detail

Your package has experienced an exception.

Tracking Number:
The shipping information including the tracking number can be found in the attached shipping label. Redelivery may be arranged by visiting the local Post Office mentioned in the attached label.

Status:
Delivery Address Change Requested

The email itself poses no danger, but if you click on the .doc file it downloads a Trojan horse embedded as an OLE object, which in turn attempts to download further malicious code onto your PC.


Source: Grahamcluley