You’ve received a postcard – Active Virus

Today’s new virus campaign comes in the tried and true category of the bogus email postcard.

Volume is high, beginning early this morning. So far all subject lines contain:

You’ve received a postcard

In each case the sending address is spoofed to match the recipient’s email address. This is done in order to try and bypass spam filters that allow you to enter approved senders or that automatically allow email from addresses in your address book.

The body of the virus message includes:

Good day.

Your family member has sent you an ecard

Send free ecards from with your choice of colors, words and music.

Your ecard will be available with us for the next 30 days.

If you wish to keep the ecard longer, you may save it on your computer or take a print.

To view your ecard, open zip attached file.

There are two attachments, either capable of launching the virus infection:

  • ecard.exe
  • ecard.zip

You might not think this “ecard” tactic should still work, but apparently it does or the spammers wouldn’t still be using it. Based on the high volume we’re seeing, this will probably be an aggressive, but relatively short campaign.

Related posts:

  1. Is DHL Delivering Virus Attachments?
  2. Is UPS Delivering Virus Attachments?

Tags: , ,

Feel free to respond but please read our Comment Policy first.