Phishing E-mails Yet Again Strike PayPal Customers
According to security researchers, customers of PayPal have again become targets of phishers who’re sending them fraudulent e-mails impersonating the world-renowned Internet payments processor, reported southbendtribune.com dated March 11, 2015.
Captioned as “Subject: Your account has limitation! You can resolve this now,” the fake electronic mail directs its recipient to validate their e-mail id to update to PayPal’s system. It then states that once the validation is done, the recipient can use the id for getting payments from relatives and pals. Over and above, the recipient can make the id his key id for any business he may conduct with PayPal. A link ‘Confirm My E-mail Address’ is included with which the e-mail ends.
But, PayPal hasn’t sent this e-mail rather it’s one phishing scam crafted for grabbing user’s intrinsic login credentials. If he submits the required credentials, it’ll just mean revealing his information to scammers, security analysts examining the e-mail scam remark.
The fraudsters equipped with the entire info would then become capable of hijacking the particular user’s PayPal A/C as well as utilize his credit card to make illegitimate purchases. They may even acquire sufficient financial and other personal details for committing ID-theft wherein the victim’s identity would be stolen.
Experts on online security advise that Internauts getting the kind of unsolicited e-mails mustn’t follow any web-links they may contain.
PayPal suggests that recipients of suspicious e-mails supposedly from the firm should forward those messages to spoof@paypal.com while keeping the caption intact. Thereafter, they must delete the messages. PayPal would return a reply as to if the electronic mails were indeed phony, the payment processor states within its advisory.
Disturbingly, phishers have been routinely attacking PayPal making the firm disable many phishing websites that impersonated PayPal on the Internet, during February 2015, for safeguarding unwitting consumers.
The most recent such sites taken offline were almost exactly the same as PayPal’s key website following release of fresh software toolkits on sale.
According to Senior Security Research Lead Andrew Hay for OpenDNS, the toolkits getting utilized were pretty refined in comparison with others they’d known earlier. Lowcards.com published this, February 19, 2015.
Via Spamfighter