Paypal phishing attempt

Discussion in 'privacy general' started by sukarof, Jul 19, 2006.

Thread Status:
Not open for further replies.
  1. sukarof

    sukarof Registered Member

    Joined:
    Jun 22, 2004
    Posts:
    1,714
    Location:
    Stockholm Sweden
    I got this today in my spamfolder at gmail. I must say that they are good. When I followed the link netcraft toolbar and spoofstick reported that I was on Paypal.com I had the certificate lock and could check that the certificate was valid.
    Noscript blocked a script from something called paypalobjects.com (valid?)
    I am not that good at this kind of stuff, I wonder how they made it through netcraft and spoofstick... and how they got my gmail adress that I use in paypa) If I havent known that no serious buisness sends out this kind of messages, gmail´s anti-phishing filter warning me and the fact that it was in gmail´s spam folder, I might have got scared and done what they wanted.

    But this shows that common sense is the only defence against this kind of **** :)

    *edit* edited the link with *** just in case it violated some forum rules.
     

    Attached Files:

  2. FluxGFX

    FluxGFX Registered Member

    Joined:
    Jan 23, 2003
    Posts:
    667
    Location:
    Ottawa/Canada
    Hi,Well unless I'm mistaken but www.paypal.com is the actual website and if it refers you exacly to the website more then likely it's legit. From the very few information I've seen in your post, it all looks legit.If you could provide the exact link in a PM It would be great.Regards,fluxgfx.com**I am a user of paypal and it's not the first time I get a message from them to update my information* By loggin onto the paypal website (not using the link) you will get a notice to update your information... it happens about every 6months or so, when you haven't used it in a while.**
     
  3. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,792
    Location:
    Texas
  4. sukarof

    sukarof Registered Member

    Joined:
    Jun 22, 2004
    Posts:
    1,714
    Location:
    Stockholm Sweden
    Hmm... I have been using paypal for more than three years, I have never got an email from them where they ask me to login to anything. (or maybe I have but deleted them instantly thinking they were phishing attempts..) It has been times when I have not used their service for more than 6 months. (I did use paypal for a transfer of money two weeks ago btw)
    So you mean that Paypal actually sends out emails to their customers where they provide a link asking the customers to login to verify things? Just like any phishing con artist? :eek:
    If so I could not imagine that in my wildest dreams :) I thought they knew that is exactly how the phishers do their dirty deeds. Or does the language barrier make me misread your post?

    Unfortunately my security setup/behaviour strikes back at me :) I did delete the email with all the other spam messages in the spam folder and I have firefox setup to erease all the history when I close firefox so I dont have the link anymore. :( sorry, I should have anticipated that someone should want it, my bad. But since the bad guys seems to have my email adress that I use at Paypal they will send new attempts and I will save the link as whole next time and send it to anyone interrested.

    Thanks Ronjor for the link. Now I see what was wrong with it :) :

    Https//www.paypal.com but I still wonder how I could check the certificate if it only was a http://
     
    Last edited: Jul 19, 2006
  5. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    It is attempted fraud - Forward to abuse@paypal.com or abuse@paypal.co.uk etc. depending upon which country you are in and what branch of paypal you usually deal with.

    Go for the abusers throats! :D

    Pilli
     
  6. ErikAlbert

    ErikAlbert Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    9,455
    The link of Paypal starts with "https:" not with "http:"
    If Paypal asks for updating or to verify your personal info, Paypal will do this when you login. They never send emails for this.
    At our Free Lotto Forum every member received those emails, even the members who didn't have a PayPal Account LOL.
     
    Last edited: Jul 21, 2006
  7. ghodgson

    ghodgson Registered Member

    Joined:
    Dec 20, 2003
    Posts:
    784
    Location:
    UK
    Its not funny.
     
Thread Status:
Not open for further replies.