Beware of email malware disguised as receipt for The Music Zoo

Email users should be aware of a popular scam campaign luring victims into opening up dangerous email attachments disguised as a receipt from The Music Zoo.

The email claims that its attachment contains a sales receipt for your order at The Music Zoo, and provides a UPS tracking number, claiming that your order will “ship tomorrow”. An example of the email can be seen below.

Thank you for your order! Please find your final sales receipt attached to
this email.

Your USPS Tracking Number is: 4363133201380219076477

This order will ship tomorrow and you should be able to begin tracking
tomorrow evening after it is picked up. If you have any questions or
experience any problems, please let us know so we can assist you. Thanks
again and enjoy!

Thanks,

The Music Zoo

55 Lumber Rd | Roslyn, NY 11576 | 516.626.9292

However this is just a scam. The email is using a social engineering trick to lure people into opening up a dangerous attachment. Of course recipients will be alarmed by an email asserting that they have ordered an item when this is not the case, so many are likely to open the attachment in an attempt to determine exactly what they have allegedly purchased.

However the attached ZIP folder will contain a malicious script file, which can result in a malware infection if opened.

Emails using various social engineering tricks to lure victims into opening up dangerous email attachments is a popular way malware can spread, including the particularly malevolent ransomware variant.

Read our article here where we give 10 examples of these types of emails that tried to trick us into installing ransomware on our computer by opening these types of attachments.