Story image

Phishing scammers target PayPal in very well crafted attack, Proofpoint finds

07 Feb 2017

Where there’s a will, there’s a way, and scammers are finding increasingly cunning ways to capitalise on the reach and popularity of the world’s global brands. This time PayPal is the target, according to Proofpoint.

The company recently discovered a phishing email message which looked like a benign PayPal login, but in reality it was a “very well crafted” phishing webpage. The page is available in multiple languages, which makes it seem all the more legitimate and across many different regions.

Behind the scenes, the phishing attack turned out to be complex and sophisticated, and Proofpoint says those are the real innovations.

The phishing attempts feature embedded URLs that direct users to the fake PayPal login.

Users who attempt to log in are dragged further into the phishing net, which only accepts genuine PayPal accounts. This is done using a decommissioned PayPal service that allows a person to buy a gift card from a user. The phishing attack then starts with a ‘reassuring welcome page’, Proofpoint says.

Users are then asked to confirm the credit card information. After the phishing kit validates the card, it asks users to enter security information about the card, the link to their bank account and details and identification.

After proceeding through a complete set of personal and financial information, the user then completes the scam and is directed to the genuine PayPal website.

Proofpoint says that the particular phishing kit shows how ‘crimeware as a service’ is rapidly advancing, and will become a more common technique.

Proofpoint says it has notified PayPal of the phishing campaign and the findings. 

Story image
10 Dec
Trend Micro debuts security services platform for cloud applications
Trend Micro Cloud One automates and simplifies cloud security to give organisations the flexibility they need to meet their most strategic cloud priorities.More
Story image
13 Dec
Blink XT2 surveillance cams patched after 'severe' vulnerabilities found
If exploited, the vulnerabilities could give attackers full control of an affected device, allowing them to remotely view camera footage, listen to audio output and hijack the device for use in a botnet.More
Story image
13 Dec
FireEye rolls out threat intelligence platform for industrial systems
Now industrial control systems (ICS), operational technology (OT), internet of things devices, and other equipment used to manage interconnected physical processes, can be secured from cyber threats.More
Story image
09 Dec
Trend Micro leads market share for hybrid cloud security - IDC
Software-defined compute technologies are often used in the context of public or private clouds, but can also be implemented in non-cloud environments.More
Story image
05 Dec
Cyberattacks becoming increasingly targeted in nature, research finds
The number of unique cyber incidents have increase for third quarter of 2019, according to a new report on the cybersecurity threatscape.More
Story image
20 Dec
Kaspersky: Malware variety grows by 13.7% in 2019 due to web skimmers
“The volume of online attacks has been growing for years, but in 2019 we saw a clear shift from certain types of attacks that are becoming ineffective, to the ones focused on gaining clear profit from users."More