Phishing E-mails Purporting to be from PayPal Circulating, Caution Experts
According to security researchers, fake e-mails masquerading as PayPal, the Internet payment processor, have been observed circulating yet again, published softpedia.com dated June 27, 2014.
In short it's written in the electronic mails that the agreement has been altered with respect to certain terms and that a given web-link should be clicked to obtain the fresh online form.
However, on clicking, users would be taken onto a phishing site, which would direct them for accessing their PayPal A/C by logging in so they may verify, update or confirm their A/C information. But, if this is done, all the credentials would actually reach the online crooks responsible for the scam.
According to the security experts, the phishing site's origin has been found in Moscow, Russia. In any case, the site is no longer active, still cyber-criminals know how to do business from a different URL whenever they want as also sell the seized credentials at an enormous value, the experts continue.
Seemingly, people will think the message as real since its return address email@example.com that the criminals happened to create would appear perfectly genuine to most users.
But, the e-mail id's domain-name i.e. paypal-account.com when navigated reveals the scam's existence for it's entirely a fake. If one examines the owner as also registration information, the scam becomes still clearer.
Unfortunately, the phenomenon of phishing, meaning scam e-mails attempting at capturing passwords and personal data, is still prevalent since almost 20-yrs, yet Internauts routinely get victimized with it, observe the experts.
Hence, for remaining safe from the aforementioned kinds of phishing e-mails, people should first peruse the e-mail id properly similar as within the aforementioned instance where the domain-name in firstname.lastname@example.org is actually not of PayPal.
Moreover, in case any e-mail arrives having a web-link to access a form that asks to input personal information, login credentials and/or financial data, it should be avoided. Trusted organizations, like PayPal within the current instance, won't ever request likewise over e-mail.
Lastly, if the phishing electronic mail is recognized, it must be deleted immediately. Alongside that, it's important to forward the message to email@example.com, the researchers suggest.
» SPAMfighter News - 7/7/2014