New PayPal Credential Phishing Scam Spotted

guest · Aug 5, 2021

New PayPal Credential Phishing Scam Spotted
In recent years, the efforts of hackers to develop sophisticated scam strategies increased significantly
August 5, 2021
https://news.softpedia.com/news/new-paypal-credential-phishing-scam-spotted-533676.shtml

It all starts with a seemingly legitimate email from the threat actor with the subject of starting a live chat about a service alert relating to the target's PayPal account. The email body is very well designed and looks very similar to the emails received from PayPal. The only flaw and indicator that something is fishy is the email address that obviously has nothing to do with PayPal.

Despite the fact that several links in the email's body are also found in authentic emails, there is a URL added by the scammer that directs the victim to a false live chat that uses automated scripts. The hacker's objective is to obtain sensitive information from his victims, such as credit card numbers, phone numbers, email addresses, and even physical addresses.
Click to expand...

Cyware: A Unique Paypal Credential Phishing Scam

What’s going on?

The threat actor sends an email, which does not raise any suspicions, with the subject line stating to initiate a live chat regarding a service notice related to the target’s PayPal account.

The email body is fairly sophisticated and contains links that can be found in legit emails. In addition to this, the actor did not even bother hiding the “from” address, which is in no way related to PayPal emails.

The URL in the email leads the target to a false live chat and the attacker employs automated scripts to conduct conversations.

Subsequently, the threat actor attempts to gain physical and email addresses, phone numbers, and credit card information.

Click to expand...

guest · Aug 8, 2022

Your next Phishing email may come straight from PayPal
August 8, 2022

Malicious actors have started to exploit a loophole in the defenses of many home users, organizations, email and security services, to send out phishing emails from legitimate services.

Using a domain that is on an allow list, on the other hand, adds trust to the email.
Phishing emails that come directly from PayPal have a greater chance of slipping through defenses because of that. Email providers and antivirus solutions may not want to block all emails coming from PayPal, as it is a legitimate service.
Click to expand...

Security researchers at Avanan, a CheckPoint company, discovered a new phishing attack in June 2022 that used free PayPal accounts to "send malicious invoices and requests". Similar to the QuickBooks invoice phishing campaign, the campaign used the legitimacy of PayPal to push past most defenses to land in the inbox of the users it attacked.

Attacked users may be inclined to call the provided phone number and/or pay the invoice. Any attempt at contacting the company used in the fake leads to communication with the attacker.
Click to expand...

Avanan: Sending Phishing Emails From PayPal

Starting in June 2022, Avanan researchers have seen hackers use PayPal to send malicious invoices and request payments. The hackers send the email from PayPal’s domain, using a free PayPal account that they have signed up for, with the email body spoofing brands like Norton. In this attack brief, Avanan will analyze how hackers are leveraging legitimate and popular websites to get into inboxes and steal credentials and money.

Vector: Email

Type: Credential Harvesting

Techniques: Double Spear, Brand Impersonation

Target: Any end-user

Click to expand...

Log in or Sign up

New PayPal Credential Phishing Scam Spotted

guest Guest

guest Guest

Log in or Sign up

New PayPal Credential Phishing Scam Spotted

guest Guest

guest Guest

Useful Searches