‘We could not deliver your parcel’ email could be scam

SAN FRANCISCO — As Christmas approaches, experts suggest an extra dollop of caution before clicking on email package delivery notices. Fake notifications are proliferating, bringing not holiday cheer — but holiday ransomware.

Phishing attacks all have a common objective: to get people to trust the receiver and follow instructions, which are usually to click on a URL or open an attachment, said Paul Calatayud, chief technology officer at the security firm FireMon.