Remove “Your DHL shipment delivery instructions” email

The “Your DHL shipment delivery instructions” email is a phishing scam designed to steal users’ email login credentials. Disguised as a parcel delivery notification from DHL, the email claims your package is ready for delivery. The email asks that you click the displayed button and fill in your details to ensure successful delivery. However, the email is a phishing attempt, and clicking on the button will lead you to a phishing site. The site asks for your email login credentials, and if you were to enter your password, it would be sent to malicious actors operating this campaign. This could result in your account being hijacked by these cybercriminals.

 

 

Malicious actors often disguise phishing emails as parcel delivery notifications, as it’s an effective tactic to get users to open attachments or click on links. This particular phishing campaign claims that DHL is about to deliver your package, but needs some details. The email doesn’t have a lot of information, but it asks that you click the provided button and enter your details.

If you were to click the “Track Parcel” button, you would be taken to a fake DHL website. The site will have a completely different URL, and a pop-up will appear saying you need to enter your email credentials to proceed. Your username will already be entered, with only the password field empty. Entering your email password on this page results in the credentials being sent directly to the cybercriminals operating the phishing campaign. These criminals may use the credentials themselves or sell them to other malicious actors. Whatever the case, you would lose access to your email account.

Email login credentials are extremely valuable to cybercriminals, as email accounts often contain extensive personal information and are linked to numerous other accounts. A successful account takeover can grant access to additional accounts and sensitive information, posing significant risks.

The full contents of the “Your DHL shipment delivery instructions” malicious email are below:

Subject: Your DHL shipment delivery instructions

Dear Sir/Madam,

We would like to inform you that your DHL package is ready for delivery. To ensure successful delivery, please fill in your details by clicking the button below.

Thank you in advance for your cooperation!

Track Parcel

If you have any questions, feel free to contact us via our official website.

This message is automatically generated and does not need to be responded to. For more information, please visit DHL Support

How to recognize phishing emails?

A lot of phishing campaigns target many users with the same exact email. That is the case with this “Your DHL shipment delivery instructions” email. Such emails are very generic, are sent from random email addresses, and lead to sites with clearly deceptive URLs. More advanced phishing campaigns usually target specific individuals, and they include personal information to enhance their credibility. Nevertheless, most users primarily encounter generic phishing emails.

When you receive an unsolicited email, especially if it asks that you click a link or open an attachment, your first step should always be to verify the sender’s email address. Do a quick online search to determine if the address matches the one that belongs to whoever the sender claims to be. Malicious email addresses can sometimes appear random and suspicious, making them easy to spot. However, cybercriminals may also use techniques to disguise email addresses, such as substituting letters to resemble legitimate companies or adding extra characters. For instance, they might add an extra “d” to create a fake DHL email address. In this case, the “Your DHL shipment delivery instructions” email was clearly not sent by DHL, as the sender’s address does not use DHL’s domain.

Additionally, pay close attention to grammar and spelling mistakes, which are common in phishing emails. While shorter emails may contain fewer mistakes, obvious mistakes are still common. Official emails from reputable service providers, such as DHL, will not contain any mistakes because they would look unprofessional. You should also take note of how an email addresses you. Emails from senders whose services you use will always address you by name, while malicious emails use generic words like customer, member, user, sir/madam, or do not address recipients at all.

It’s important not to act hastily when dealing with unsolicited emails, especially if they urge you to click a link or download an attachment. Take the time to assess the email’s authenticity and consider whether receiving it even makes sense. For example, receiving this “Your DHL shipment delivery instructions” email when you are not expecting a package is a clear indication that the email is not legitimate.

Remove “Your DHL shipment delivery instructions” email

If you receive this “Your DHL shipment delivery instructions” email, delete it immediately. If you have already engaged with the email and shared your email login credentials, change your password if you still have access to your account. Additionally, review your account activity for any indications of unauthorized access. Should your email account have been compromised, contact your email service provider for help in restoring access. If your email account is no longer accessible, disconnect it from any linked accounts to prevent them from being hijacked as well.