Rather late, but main way this one is distributed is via spam links about UPS or FedEx. If you’ve not sent anything, or aware of anything being sent to you, just delete the mail. UPS or FedEx will deliver your package to you either way whether you do anything or not, if it exists.

Remember to always verify first before clicking a link in an email first, never download and open a .zip file if you were not expecting it. Wait for verification first in all cases.