A new spam about Fedex has been circulating the web last thursday according to a blog entry at Sophos. The title or subject line of the spam is Tracking N (plus random digits).

It notifies the user that their package was not delivered to a recipient because the recipient’s address is incorrect. Then, it instructs the user to print the invoice copy which is attached in the email.

The attachment is a zip file with an executable file. Sophos detects this file as Troj/FakeAV-BY and they posted the message in their blog entry to show what it looks like.

Source: Sophos