Good point Nicholas, but it is difficult to assess the danger without the attachment. In retrospect, I should have sent a jpeg showing the problem. I must admit, with a little more stealth, this might have caught me out. The poor English should have been a flag but like 50% of Americans, I am waiting for a few shipments that this could have been related to. I wonder how many others received the email. Laurence From: Nicholas Oas [mailto:[log in to unmask]] Sent: Thursday, March 08, 2012 4:35 PM To: [log in to unmask] Subject: Re: [MSUNAG] FW: UPS Delivery Notification, Tracking Number B80F119957814DA9 Hmm. Sending malicious attachments to a MSU mailing list? I think we may have our first suspect in the Redwater Scandal. From: Laurence Bates [mailto:[log in to unmask]] Sent: Thursday, March 08, 2012 3:59 PM To: [log in to unmask] Subject: [MSUNAG] FW: UPS Delivery Notification, Tracking Number B80F119957814DA9 This looks like a particularly dangerous email load - a credible looking web page attachment which offers an executable "invoice" Unless I am mistaken, this could catch quite a few users. Laurence From: UPS Quantum View [mailto:[log in to unmask]] Sent: Thursday, March 08, 2012 1:49 PM To: [log in to unmask] Subject: UPS Delivery Notification, Tracking Number B80F119957814DA9 You have attached the invoice for your package delivery. Thank you, United Parcel Service *** This is an automatically generated email, please do not reply ***