Those of you who read this blog know I try to post any suspicious emails I see online for the benefit of the community.  I’ve been recieving emails lately - which correspond quite well with actual purchases for the holidays - that purport to be from UPS.  The body of the email goes something like this:

Unfortunately we were not able to deliver postal package you sent on Oct the 28 in time because the recipient’s address is not correct. Please print out the invoice copy attached and collect the package at our office Your UPS

The sender’s domain name is bostonequipment.com, which is a legit domain name, but unlikely to be the sender’s real domain.

The “invoice” in question is, of course, a zip file.  People: never, never, never open a zip file from someone you didn’t know was going to be sending you one.  This includes friends and relatives.  You never know when one of these dastardly little bastards is a virus, and what you think is an email sent by a friend may actually be virus activity your friend knows nothing about.