Summary

A fake DHL delivery email is being used to trick people into installing software that gives attackers remote control of their device. Once installed, it can be used to steal data or spread more harmful software.

Who Is at Risk

Anyone who receives a DHL delivery notice email, especially people expecting a package.

What to Watch For

Watch for unexpected shipment emails that urge you to open a file, click a link, or install software to view delivery details.

What to Do

Do not open attachments or install anything from the email; instead, go directly to the delivery company’s official website or app to check your shipment.