Ups package central how to#
Ups package central full#
Ups package central software#

Ups package central full#

UPS ® operates more than 2,000 daily flights to 220 countries and territories, offering a variety of day- and time-specific delivery options, full tracking visibility, and expertise in customs clearance regulations. Next time you’re looking to send something to another country, save time by bringing it to your neighborhood The UPS Store and letting us handle the details. Our experts understand the ins and outs of shipping internationally, especially when it comes to customs, regulations, rules and tariffs. Whether you’re sending letters to family, presents to friends or even freighting large items abroad, we offer a wide range of international shipping services to make sure your packages arrive safely and speedily. Given the amount of deception and misdirection that it took to get to this point, it's a fair bet that the image was nothing good.The certified experts at your local The UPS Store® make shipping overseas as simple as can be. Unfortunately, by the time Bleeping Computer was able to repeat the process, the image was no longer available, so we can't be exactly sure what it contained. Needless to say, you should never Enable Content on some random Word, Excel or PowerPoint document downloaded from the internet.īut if you do, a macro in the Word doc downloads a possibly malicious. Microsoft Word will tell you that macros - small scripts that can run in Office files - have been disabled, but the Word file tells you to 'Enable Content' to see the text.

Open that Word doc, and the text will be so blurry that you won't be able to read it. Here's where this scheme becomes more of a regular phishing/malspam scam, and where it's easiest to avoid. The crook has exploited a cross-site scripting (XSS) flaw in the UPS site to add their own code, which reaches out to another website to fetch and deliver a Word document to the site visitor. Click on either, and you land on a page on the UPS website telling you that 'Your download will start shortly.' That will display the destination URL at the bottom of your screen.īut in this case, you'll see a real UPS.com web address when you hover over the tracking number or the invoice link. Normally, you can avoid email-based phishing scams by hovering your mouse cursor over the link in the body of the message. However, it wouldn't be that difficult for the sender to 'spoof' a legitimate UPS.com email address if they wanted to. The only tip-off that this is bogus is the address of the email sender, which includes 'unitedparcelservice' but has a different dot-com name. You are invited to 'download and print out the invoice to pick up the package at the UPS Store' or to click the tracking-number link. The deception begins with a convincing-looking email message notifying you that 'your package has experienced an exception,' defined as 'when a package or shipment encounters an unforeseen event.'

Ups package central how to#

How the phish works - and how to avoid it But it won't be the last time this method is used in phishing and 'malspam' (malicious spam) campaigns.

Ups package central software#

UPS.com has since fixed the particular flaw that permitted the crook to inject malicious code right into the company website, and most of the best antivirus software detects the malicious Word doc.