sb-as logo
Story image

Phishing scammers target PayPal in very well crafted attack, Proofpoint finds

07 Feb 2017

Where there’s a will, there’s a way, and scammers are finding increasingly cunning ways to capitalise on the reach and popularity of the world’s global brands. This time PayPal is the target, according to Proofpoint.

The company recently discovered a phishing email message which looked like a benign PayPal login, but in reality it was a “very well crafted” phishing webpage. The page is available in multiple languages, which makes it seem all the more legitimate and across many different regions.

Behind the scenes, the phishing attack turned out to be complex and sophisticated, and Proofpoint says those are the real innovations.

The phishing attempts feature embedded URLs that direct users to the fake PayPal login.

Users who attempt to log in are dragged further into the phishing net, which only accepts genuine PayPal accounts. This is done using a decommissioned PayPal service that allows a person to buy a gift card from a user. The phishing attack then starts with a ‘reassuring welcome page’, Proofpoint says.

Users are then asked to confirm the credit card information. After the phishing kit validates the card, it asks users to enter security information about the card, the link to their bank account and details and identification.

After proceeding through a complete set of personal and financial information, the user then completes the scam and is directed to the genuine PayPal website.

Proofpoint says that the particular phishing kit shows how ‘crimeware as a service’ is rapidly advancing, and will become a more common technique.

Proofpoint says it has notified PayPal of the phishing campaign and the findings. 

Story image
OkCupid website and app found to have significant security flaws
The popular online dating service has been found to have several vulnerabilities which, if exploited, could put the private data of users in danger of being stolen.More
Story image
Interview: ThreatQuotient champions threat intelligence through virtual 'situation rooms'
To understand what it involves and some of the collaboration challenges that come with distributing threat intelligence amongst specialised security teams, we spoke to ThreatQuotient APJC regional director Anthony Stitt.More
Story image
Internet outages drastically increased during COVID-19 lockdowns, report finds
Global internet disruptions increased 63% in March, with internet service providers hit the hardest. This is according to the 2020 Internet Performance Report from ThousandEyes, the internet and cloud intelligence company.More
Story image
Cloud breaches set to increase in velocity and scale - Accurics
“While the adoption of cloud native infrastructure such as containers, serverless, and servicemesh is fuelling innovation, misconfigurations are becoming commonplace and creating serious risk exposure for organisations."More
Story image
7 VPN services leaked data of 20 million users - report
"The report calls into question the providers’ security practices and dismisses their claims of being no-log VPN services."More
Story image
10 billion records sit in unsecured databases - China leads the pack
The hacker uncovered a total of 9517 unsecured databases worldwide, collectively containing more than 10 billion entries.More