Scambusters, Preventing Internet Scams & Phishing Attempts

This blog is dedicated to help preventing internet fraud and internet scams. Scambusters was a radio show I started in Albany Oregon, but due to defaulted payment by the radio station we took the show offline. Regardless of this issue we still wish to help prevent internet fraud and save people from internet loss. I have been interviewed and featured in various publications such as the Wall Street Journal, New York Times & Daily News, The London Times & AARP Newsletters. Please watch this blog for latest tips and tricks and scams to avoid.

Tuesday, April 01, 2008

PayPal Phishing Attack

US-CERT Current Activity

PayPal Phishing Attack

Original release date: April 1, 2008 at 10:22 am Last revised: April 1, 2008 at 10:22 am

US-CERT has seen reports of a phishing attack that targets PayPal users. The attack arrives via an unsolicited email message containing an HTML attachment. The message indicates that the attachment is a verification form intended to offer the user protection from fraudulent activity. Users who open the attachment are instructed to enter their email address and PayPal password. This information is then sent to an attacker.

US-CERT encourages users to do the following to help mitigate the

risks:

* Install anti-virus software and keep virus signatures up to date.

* Do not open unsolicited email messages.

* Refer to the Recognizing and Avoiding Email Scams document for

more information on avoiding email scams.

* Refer to the Avoiding Social Engineering and Phishing Attacks

document for more information on social engineering attacks.

Relevant Url(s):

http://www.us-cert.gov/cas/tips/ST04-014.html

http://www.us-cert.gov/reading_room/emailscams_0905.pdf

No comments: