Comments on Last In - First Out: Your package has arrived.

They just need to say it comes from ups.com. UPS ...

2010-12-11T10:12:00.887-06:00

They just need to say it comes from ups.com. UPS don't use SPF (Sender Policy Framework, so there is no validation that the host actually is permitted to send email on behalf of ups.com. Anti-phishing code would likely recognize the disconnect between the displayed address and the actual address.

Got the same email just today. I'm confused t...

2010-12-09T02:30:15.290-06:00

Got the same email just today. I'm confused though. How can they send this from tracking@ups.com?

Also, the invoice thingy got me. I downloaded it but my firewall acted up so I had to do a system restore. Is my PC safe? :D

John - Awesome. We had a finance person fall for a...

2010-12-04T22:05:18.161-06:00

John - Awesome. We had a finance person fall for a phish a couple days ago. That's a pain.

Jon - This one actually got caught by Forefront's AV. I released it from quarantine, figuring it'd be interesting to play with. :)

I've seen a few of these hit our office. Unfo...

2010-12-04T20:07:56.255-06:00

I've seen a few of these hit our office. Unfortunately one of the poor victims clicked on the link on their home computer because she regularly receives packages from UPS. It's a very well conceived phishing scheme.

My finance people actually asked me about it *befo...

2010-12-04T09:36:15.664-06:00

My finance people actually asked me about it *before* clicking on anything. I'm so proud of them.