Canada Post Email Spam Subject: Your package has arrived!

Almost fell for this one at work .. but noticed that the links in the email did no match the link shown at the bottom of my browser. Very sneaky. Of course, best practice is not to just click the links in an email, but to type the main website e.g. canadapost.ca into the browser to get to where you want to go. Sad to say you just can't trust any old mail you get these days..

May 11, 2011 - Significant activity was detected on May 9 related to spam email messages that claim to contain a Canada Post shipment notification. The text in the email message instructs the recipient to follow a link to view an invoice.

These emails are not coming from Canada Post, and are fraudulent. Please do not click on the links or open any attachments. The anonymous authors of this email virus unfortunately are using the Canada Post name to get you to trust the message.

The following is a sample email message that is associated with this threat outbreak:

"Subject: Your package has arrived!
Message:
Dear client
Your package has been shipped.
The tracking# is: RTO948101422K and can be used at:
hxxt://www.canadapost.ca/cptools/apps/track/personal/findByTrackNumber?execution=e9s1
The shipping invoice can be downloaded from:
hxxp://www.canadapost.ca/cptools/apps/track/personal/findByTrackNumber?track=RTO948101422K
Thank you,
Canada post corporation"

Several versions of the message are circulating, and could include different tracking numbers depending on the variant of the message you receive. We are aware of one version which is falsely reporting delivery of a package from the Heart and Stroke lottery foundation, and there may be others circulating with different package senders being spoofed.

Steps you can take to protect yourself if you receive an email that appears to be from Canada Post:

1. If you feel the email is suspicious or there is an attachment, delete it.
2. Whether you are expecting a package delivery by Canada Post or not, and there is a tracking number in the email, you can do the following:
   • Check the tracking number by going directly to www.canadapost.ca and entering the tracking number on the home page where indicated.
   • If the tracking number is not valid, "Invalid Tracking Number format. Please check your entries and try again." will appear on the screen in red letters. Delete the email without clicking any links which may be in the email.

We regret any inconvenience this may cause and are taking this matter seriously. We will provide further updates as information becomes available.