MAIL MALICIOSO QUE SE ESTA RECIBIENDO CON APARIENCIA DE VENIR DE USPS

Se está recibiendo un mail-spam que incluye un enlace malicioso a un site de HongKong:

MAIL MASIVO MALICIOSO
_____________________

De: USPS [mailto:usps@uspsdelivery.com]
Enviat: dimarts, 14 / març / 2017 16:55
Per a: DESTINATARIO
Tema: Shipment status change notification for parcel #40667274

Your shipment could not be completed by our courrier because there was nobody at your address.
A persons signature is needed to successfully deliver the package.

Service: Priority Mail Express
Weight: 3.25 lbs
Date : Mar 14th 2017

We have left a delivery notice at your address. You can schedule a new delivery, by calling the number on the notice and confirm the shipping information: senders address, tracking number. This information can also be found on the notice.
The notice can also be viewed online on our website (Microsoft Word must be installed on your PC) :
https://tools.usps.com/web/pages/document.view?noticeid=40667274 &receiver=DESTINATARIO <http://www.newgrand.com.hk/api/getn.php?id=aW5mb3JtYXRp????> <— ENLACE MALICIOSO A http://www.newgrand.com.hk/api/getn.php?id=aW5mb3JtYXRpY2FAcGFsYXVtdXNpY2E???? (DOMINIO .hk = HongKong)

If a new delivery is not arranged within 24 hours, the shipment will be cancelled and the package returned to the sender.

Thank you for choosing USPS

Copyright © 2017 USPS. All Rights Reserved.
_____________

FIN MAIL MASIVO MALICIOSO

Si bien McAfee ya intercepta la ejecución del enlace malicioso arriba indicado:

“Este sitio web está bloqueado.
http://www.newgrand.com.hk/api/getn.php?id=aW5mb3JtYXRpY2FAcGFsYXVtdXNpY2E????
El contenido de este sitio web infringe la directiva de uso aceptable.
Categoría web de McAfee: Sitios maliciosos
Calificación de seguridad de McAfee: Rojo

Powered By: McAfee Endpoint Security”

recomendamos eliminar dicho mail dado que con toda seguridad tiene malas intenciones…

Ver mas información sobre el mail-spam indicado en:

https://techhelplist.com/spam-list/1102-shipment-status-change-notification-for-parcel-malware

saludos

ms, 15-3-2017

ms, 15-3-2017

NOTA: Ver comentarios sobre dominio .hk en Fuente:
http://www.pcworld.es/archive/el-dominio-hk-el-mas-peligroso