Comments on: Evil New PayPal Phish! New email address added to your PayPal account!

By: tony

tony — Mon, 26 Feb 2007 17:22:16 +0000

I GOT ONE OF THESE ALSO, IF I FIND THAT SOB I WILL BREAK BOTH HIS HANDS!
TO THE PUBLISH; WERE GETTING CLOSER!

By: Matthew

Matthew — Mon, 07 Aug 2006 03:55:52 +0000

Hey, I got this twice today in my junk folder.

“You’ve added an additional email address to your PayPal account.

If you donâ€™t agree with this email jerry54@aol.com“>jerry54@aol.com and if you need assistance with your account,

please click here to login to your account.

To make sure you can use your PayPal account the next time you make a purchase,

all you need to do is confirm or not your email address.

If your email program has problems with hypertext links,

you may also confirm your email address by logging in to your account.

Thank you for using PayPal!

The PayPal Team

—————————————————————-

Please do not reply to this email. This mailbox is not monitored and you will not receive a response.

For assistance, log in to your PayPal account and click the jerry54@aol.com“>Help link located in the top right corner of any PayPal page.

—————————————————————-”

The paypal accoutn is actually my father’s, but it’s in my email account because he doesn’t know anytihgn about how to use a cmputer. The odd thing about the emai; is the links don’t lik you any where of you know what I mean./ Like where it says “click here” well…there’s nothing to click on. So is this a fake or what?

By: Wayne Hunt

Wayne Hunt — Tue, 14 Feb 2006 06:26:05 +0000

I just received a similar email and tracked it back to the people behind it. Check out this link for details:
http://blog.ourcurrentfuture.com/2006/02/14/TrackingDownAPhishingScammerFromTheEmailReturnHeaders.aspx

By: twinkerbird

twinkerbird — Mon, 07 Nov 2005 17:02:00 +0000

All of these “phishing” expeditions are the reason why I do a bare minimum of shopping on the Internet. It’s still way too easy to steal identities and still way too hard to clean up the mess.

By: martinelli

martinelli — Sun, 06 Nov 2005 03:30:08 +0000

Another EVIL one. You don’t get infected, the malware merely changes your DNS server entries. It is sent as a link to a Paypal Security Tool the perp (supposedly PayPal) tries to get you to download and run.

Quote: “‘PayPal-2.5.200-MSWin32-x86-2005.exe’, is a Trojan Horse which modifies the DNS server of the local workstation and then deletes itself. All future requests for ‘paypal.com’ will be transparently redirected to a phishing website. This same DNS server could also be used to redirect requests for additional websites, but it currently appears to only redirect ‘paypal.com’.”

http://www.websensesecuritylabs.com/alerts/alert.php?AlertID=329

By: Danny Goodman

Danny Goodman — Sat, 05 Nov 2005 15:42:59 +0000

Newer still is a PayPal phish I received yesterday from “PayPal Security Center.” The social engineering aspect (used before) is a bogus report of someone trying to access your account from several foreign IP addresses. The Subject line is “Security Measures - Are You Traveling?” Then comes the invitation to download the “Ultimate PayPal Security Tool.” The link is to an executable (.exe) file (on a Romanian hosting service). Analysis of the file reveals it to be a Trojan Dropper.

Like Aunty says: Don’t click those links!

By: Don

Don — Sat, 05 Nov 2005 13:34:15 +0000

I keep all my passwords for any financial websites (banking) and any other websites of interest (probably a couple 100 or so) on a CD and access them only when I need access to the website of interest. I use WordPad to copy/paste my username/password, then close WordPad. Not sure if you should show this tip or not (prying eyes you know)!

By: Lynn

Lynn — Sat, 05 Nov 2005 04:23:26 +0000

This isn’t new, I received the same message a couple months ago.

By: Scott

Scott — Fri, 04 Nov 2005 23:52:19 +0000

Hi Aunty;
I thought you’d be interested in another PayPal email I got this week. It looked exactly like the one you get when you make a payment through PayPal, only I hadn’t made a payment to anyone. The worst part, however, was that it automatically attempted to open my web browser and log into PayPal. I didn’t even click on any links!!! It was unsuccessful, but I can’t help wondering what would have happened if I would have had my password stored on my computer? I sent the email to PayPal but I didn’t get any response from them. I did immediatley change my PayPal password and have been keeping a very close eye on it.

Thanks for all the great tips! Keep up the good work, we really appreciate it.