Not only is DHL the third-most impersonated brand, according to Check Point Research, but it also delivers packages from around the globe. What’s particularly clever is the spoof of DHL. In this email attack, hackers have used brand impersonation. This email purports to be a notification about an undelivered package. This email utilizes traditional social engineering tactics, such as urgent language about the package being delivered today, to get the user to act: In this email, hackers present what looks like a message about a package that can’t be delivered. By going online, you can submit your address, as well as other information, to get the delivery on time and at the right place. The email starts with noting that there is an “undelivered” package from DHL. That link, however, is a classic credential harvesting link, looking to steal data and other information. By showing a page that looks like it comes from a trusted brand, they’re hoping to trick end-users into clicking on a link.

In this attack, scammers are using brand impersonation. Techniques: Brand Impersonation, Spoofing.When users click on the link, they will be directed to a credential harvesting page. In this attack, hackers are leveraging a spoofed DHL notification.

In this attack brief, Avanan will analyze the company’s most recent discovery of this credential harvesting attack. Starting in November 2021, Avanan observed a new credential harvesting attack in which attackers spoofed an undelivered package notification from DHL. Around the holidays, that will only increase. Shipping companies are already some of the most spoofed brands in the world. With folks worldwide concerned about the status of their holiday shopping, they can be expected to constantly check for updates from their carriers.

Did you go wild spending on Black Friday? In anticipation of a shipping crunch, did you seek further afield sellers to find what your friends and family are looking for?

By end of day dhl