spunky
|
posted on 23/3/05 at 12:43 AM |
|
|
Has anyone recieved anything like this
Got this e-mail... all looks very official from Paypal but the link doesn't do anything and the URL looks odd to me....
Dear PayPal valued member,
PayPal is committed to maintaining a safe environment for
its community of buyers and sellers.
To protect the security of your account, PayPal employs
some of the most advanced security systems in the world
and our anti-fraud teams regularly screen the PayPal
system for unusual activity.
Recently, our Account Review Team identified some unusual
activity in your account.
In accordance with PayPal's User Agreement and to ensure
that your account has not been compromised, access to
your account was limited.
To restore your account please click on the link bellow:
http://www.paypal.com/cgi-bin/webscr?cmd=_login-run
If you fail to restore your account access by the date
shown below, your account will be closed.
This notification expires on the 23th of March, 2005.
About | Accounts | Fees | Privacy | Security Center | Contact Us | User Agreement | Developers | Buyer Credit | Referrals | Shops | Mass Pay
an eBay company
Copyright © 1999-2004 PayPal. All rights reserved.
Information about FDIC pass-through insurance
--------------------------------------------------------------------------------
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.0.308 / Virus Database: 266.7.4 - Release Date: 18/03/2005
The reckless man may not live as long......
But the cautious man does not live at all.....
|
|
|
scoobyis2cool
|
posted on 23/3/05 at 12:50 AM |
|
|
Almost certainly a hoax, seen these things numerous times. If you want to check your account sign in the way you normally would through their website,
DON'T use the link, it will send your details off to someone so that they can access your account.
Pete
[Edited on 23/3/05 by scoobyis2cool]
It's not that I'm lazy, it's that I just don't care...
|
|
spunky
|
posted on 23/3/05 at 12:55 AM |
|
|
B@%*!#?DS
Thanks for the swift response Pete.
I've changed my password, just in case.....
Cheers
John
The reckless man may not live as long......
But the cautious man does not live at all.....
|
|
Hellfire
|
posted on 23/3/05 at 01:09 AM |
|
|
However - if that address is correct as it is via paypal.com then it goes through paypal... looks genuine to me actually. Anyone?
|
|
spunky
|
posted on 23/3/05 at 01:19 AM |
|
|
Hi Steve,
copied and pasted the e-mail to Paypal fraud dept. and recieved a reply straight away stating that it was not sent by Paypal.
The clue is in the greeting. Paypal always refer to you by first and last name.
Bloody convincing though.
John
The reckless man may not live as long......
But the cautious man does not live at all.....
|
|
pbura
|
posted on 23/3/05 at 02:50 AM |
|
|
Have had a couple like that. If you scroll over the link, you'll see that it takes you to a different site than paypal.
If you forward that letter to spoof@paypal.com, they'll be glad to hear from you!
Pete
|
|
JoelP
|
posted on 23/3/05 at 08:09 AM |
|
|
also, when forwarding it, try to include the headers so they can see the full origin and return path.
|
|
mangogrooveworkshop
|
posted on 23/3/05 at 08:45 AM |
|
|
Had a stack of those fakes and as you say it looks very real. Rule to self always type the paypal url never use a link as it could be like this
www.paypal.con
and you wouldnt take a second look at it.
[Edited on 23-3-05 by mangogrooveworkshop]
|
|
mangogrooveworkshop
|
posted on 23/3/05 at 08:50 AM |
|
|
Scary real to the less experianced .
Rescued attachment scampal.jpg
|
|
ned
|
posted on 23/3/05 at 09:58 AM |
|
|
the way a lot of these things work is the link is a genuine paypal web address, but it actually fires off a rogue website, normally with the address
and toolbar removed, this comes up in the foregruond and it also fires off the bank/paypal homepage in the background to make you think you're
inteh right place.
As said if you ever suspect anything dodgy log into your bank/paypal account from their own website, never from an email link. if it's
desperate/legitimate they'll have a message informing you when you log in the normal way.
Ned.
beware, I've got yellow skin
|
|
DaveFJ
|
posted on 23/3/05 at 12:55 PM |
|
|
A new 'feature' of this kind of site is that they will employ an address that LOOKS genuine. basically they employ international
characters which although identical to western characters will be interpreted by the browser differently.
this LINK
will tell you more and there is a test to see if you are vulnerable.
Dave
"In Support of Help the Heroes" - Always
|
|
David Jenkins
|
posted on 23/3/05 at 02:16 PM |
|
|
If you are running Firefox you should upgrade to ver 1.0.1 fairly soon as there is a security problem - nefarious folk have discovered that they can
direct people to a phishing page and hide the URL by mucking around with the IDN (see
http://news.zdnet.co.uk/internet/security/0,39020375,39189172,00.htm )
Tools - Options - Advanced, then scroll down to Software Update. Click on the "check now" button and accept the download for 1.0.1)
This will mend the problem pointed out by Dave.
cheers,
David
|
|
JoelP
|
posted on 27/3/05 at 10:30 PM |
|
|
this is an example of a real mail from ebay. note they ask you to go to the main site and log in there.
quote: Hello joel1_1_1,
We are writing to alert you that your balance is not paid, because your
credit/debit card declined eBay's attempt to charge your monthly invoice amount
to your card.
Your payment is due by your next invoice date. Please follow these steps to make
a payment:
- Go to the eBay Home page
- Select My eBay and logon with your eBay User ID and Password
- Select the Accounts Tab
- Select an option to Pay Your eBay Seller Fees (you will need to logon
again)
As a courtesy, eBay will automatically make a second attempt to charge your
card. This attempt will take place in about 5 to 7 days.
As a reminder, overdue accounts may be restricted from buying or selling until
payment is received.
Regards,
eBay International AG
|
|