Fake DHL READ : (DHL Express) -Delivery Address Confirmation delivers Remcos Rat

Yet another fake or spoofed DHL delivery notification delivering what today turns out to be Remcos RAT . An email with the subject of “READ : (DHL Express) -Delivery Address Confirmation” Pretending to come  from dhlSender@dhl.com <noreply@dhI.com> with a link in the email to download a word doc that in turn will download & run Remcos Rat They use email addresses and subjects that will entice a user to read the email and open the attachment. A very high proportion are being targeted at small and medium size businesses, with the hope of getting a better response than they do from consumers. Continue reading →