TNT Express Phishing Email Scam

The “TNT Express” phishing email scam is a deceptive attempt by cybercriminals to trick recipients into disclosing their sensitive information, particularly email credentials. This scam is particularly dangerous as it mimics a legitimate delivery service notification from TNT Express, luring users into thinking they need to sign shipment documents.

---

TNT Express Phishing Scam Overview

The scam email pretends to be from TNT Express, an international courier delivery services company. It claims that a shipment has been scheduled for delivery and that the recipient must sign a consignment note and other documents. However, this email is a phishing attempt, designed to steal login credentials and access to email accounts.

Key Characteristics of the Scam

• Subject Line: “TNT consignment number: 87993766478” (the number may vary)
• Sender: Impersonates TNT Express
• Content: The email asks the recipient to print, sign, and return shipment-related documents, including consignment notes.
• Attachment: “Shipping Documents.pdf.shtml” (the file extension may vary, but it’s typically a disguised .shtml file pretending to be a PDF)

When the recipient opens the attached file, a fake Adobe cloud storage interface is presented, prompting the user to enter their email login credentials. Once the user enters the information, scammers gain unauthorized access to the victim’s account.

---

Detailed Table of TNT Express Phishing Threat

Attribute	Details
Threat Type	Phishing, Scam, Social Engineering, Fraud
Detection Names	Avast (HTML:Phishing-DUK [Phish]), Combo Cleaner (Trojan.Script.EDO), ESET-NOD32 (HTML/Phishing.Telegram.A), Fortinet (JS/Phishing.D146!tr), Symantec (Phish.ScrTgHtml!gen1)
Symptoms of Infection	Unauthorized online purchases, changed online account passwords, identity theft, illegal access to the computer
Damage	Loss of sensitive private information, financial loss, identity theft
Distribution Methods	Deceptive emails, rogue online pop-up ads, search engine poisoning techniques, misspelled domains
Danger Level	High – The scam can lead to identity theft, financial loss, and the unauthorized use of sensitive information.

---

How the TNT Express Phishing Scam Works

1. Deceptive Email: Victims receive an email that appears to come from TNT Express, claiming that a shipment is scheduled for delivery. The subject line includes a consignment number, which may look legitimate.
2. Fake Documents: The email encourages the recipient to download the attached “Shipping Documents.pdf.shtml.” The attachment is disguised as a PDF file but is actually a malicious script.
3. Phishing Interface: When opened, the attachment presents a fake Adobe cloud storage interface, asking the recipient to log in with their email credentials.
4. Credential Theft: Once the victim enters their login information, the scammers gain access to the victim’s email account. They can use this access to steal sensitive information, impersonate the victim, or perform malicious actions.

---

How to Remove the TNT Express Phishing Threat

If you suspect that you have been targeted by this phishing scam or have already fallen victim to it, it is crucial to take immediate action to protect your sensitive information and remove the threat. Here’s how SpyHunter can help you:

Step 1: Install SpyHunter

• Download and install SpyHunter, a powerful anti-malware tool that specializes in detecting and removing various types of malware, including phishing threats.
• Once installed, launch SpyHunter and perform an initial scan of your system.

Step 2: Run a Full System Scan

Select the full system scan option to check for any traces of malware or phishing files. This will help identify any infected files or malicious scripts that may have been downloaded from the phishing email attachment.

Step 3: Remove Identified Threats

• After the scan is complete, SpyHunter will present a list of any detected threats. Review the results and select the phishing threats related to the TNT Express scam.
• Follow SpyHunter’s instructions to remove all identified threats and ensure your system is fully cleaned.

Step 4: Change Your Login Credentials

• If you’ve entered your email credentials in the phishing form, immediately change the passwords for all affected accounts. This includes your email account, banking accounts, and any other services you access with the compromised email.

Step 5: Monitor Your Accounts

Keep an eye on your online accounts for any unauthorized transactions or changes. Notify relevant services (such as your bank) if you suspect your financial information has been compromised.

---

Preventive Methods to Avoid Future Phishing Attacks

To avoid falling victim to future phishing scams like the TNT Express attack, follow these preventive measures:

1. Be Skeptical of Unsolicited Emails: Always be cautious when receiving unsolicited emails, especially if they contain attachments or links. Verify the sender’s email address to ensure it’s legitimate.
2. Do Not Click on Suspicious Attachments: Avoid opening email attachments from unknown sources, especially files with suspicious extensions like .shtml, .exe, or .scr.
3. Use Strong, Unique Passwords: Create strong, unique passwords for each of your online accounts. Avoid reusing passwords across multiple sites.
4. Enable Two-Factor Authentication: Wherever possible, enable two-factor authentication (2FA) on your online accounts. This adds an additional layer of protection, making it harder for scammers to gain access.
5. Keep Your Antivirus Software Updated: Regularly update your antivirus software and run periodic scans to detect and remove any potential threats.
6. Educate Yourself and Others: Stay informed about the latest phishing scams and educate others, especially vulnerable individuals, on how to recognize and avoid such threats.

---

Conclusion

The “TNT Express” phishing email scam is a dangerous threat that can lead to identity theft, financial losses, and unauthorized access to sensitive personal information. By being vigilant and following best practices for email security, you can protect yourself from falling victim to such attacks. If you suspect you’ve been targeted by this scam, remove the phishing threat using SpyHunter and take immediate action to secure your accounts. Prevent future infections by following the preventive measures outlined in this guide. Stay safe and informed!