Hackers spoofing USPS to trap victims