"It looked like it was from UPS and it said we were unable to deliver your package. However, if you click on the following link you can look up the tracking information on that package and then you can reroute it back to your place. At that point, I clicked on the link and my screen started flashing," Hoehn said.
"The message said, 'You have been hacked. We have encrypted all of your files. Send, I think it was like 150 bitcoins to this address."
A fake shipping link can launch ransomware like it did for Hoehn, or it can redirect to a counterfeit branded page that asks for credit card or personal information to reroute a package, or tricks you into entering your username and password.