Fake email from "Paypal"

Karl Hungus

Dear valued PayPal member,

It has come to our attention that your PayPal account information needs to be updated as part of our continuing commitment to protect your account and to reduce the instance of fraud on our website. If you could please take 5-10 minutes out of your online experience and update your personal records you will not run into any future problems with the online service.

However, failure to update your records will result in account suspension. Please update your records on or before July 11, 2007.

Once you have updated your account records, your PayPal session will not be interrupted and will continue as normal.

To update your PayPal records click on the following link:
http://customer-200-79-24-3.uninet-ide.com.mx/icons/webscr/cgi_bin/cmd_login/index.php



Thank you,
PayPal Update Team

Funnily enough, this email came from service@paypall.com

Yeah... that's going to work. :rolleyes:

Well, incase anyone here is dumb enough to believe such an email (And if there's one place to find a larger population of stupidiots than anywhere else on boards, it's After Hours), this is a heads up for you peons.

Ruu_Old

Hehe haven't gotten any in a few weeks, used to get heaps of the similar ones. Of course official Paypal emails always mention the account holders full name in the Dear x line.

mike65

Damn




















Mike.

Guy:Incognito

I always make a point of going into them and "logging in" with insults as usernames and passwords etc. I like to think it annoys the scammer when he reads it.

Dermot2468

Cool firefox wont let me open that, get a big warning on screen. Nice to know im safe

weeder

ditto

griffdaddy

clicked the link out of curiosity there, just to see how much like paypal it actually looks. Firefox popped up a huge balloon telling me not to go near the thing, that it was a website suspected of trying to get financial information etc. Then I tried it out of interest with Internet Explorer, which seemed perfectly happy to allow me have my money robbed, surely every browser should work off the same data base of dodgy sites or something.......unless.....Bill Gates???

cornbb

Stekelly wrote:

I always make a point of going into them and "logging in" with insults as usernames and passwords etc. I like to think it annoys the scammer when he reads it.

Nice idea, done!

Orange69

griffdaddy wrote:

clicked the link out of curiosity there, just to see how much like paypal it actually looks. Firefox popped up a huge balloon telling me not to go near the thing, that it was a website suspected of trying to get financial information etc. Then I tried it out of interest with Internet Explorer, which seemed perfectly happy to allow me have my money robbed, surely every browser should work off the same data base of dodgy sites or something.......unless.....Bill Gates???

If anyone is using IE in this day and age then they deserve all they get...

Although having said that opera does not warn you either and its the Awsome-O 4000 of web browsers!

Guy:Incognito

Dermot2468 wrote:

Cool firefox wont let me open that, get a big warning on screen. Nice to know im safe

IE does the same but I soldiered on to annoy them with insults.

griffdaddy wrote:

clicked the link out of curiosity there, just to see how much like paypal it actually looks. Firefox popped up a huge balloon telling me not to go near the thing, that it was a website suspected of trying to get financial information etc. Then I tried it out of interest with Internet Explorer, which seemed perfectly happy to allow me have my money robbed, surely every browser should work off the same data base of dodgy sites or something.......unless.....Bill Gates???

The current version of IE puts up a screen like with an dead link but telling you its a reported phising site etc. It gives you an option to proceed anyway if you want to.

Mr. CooL ICE

Luckily enough, gmail wraps me up in cotton wool and cuts the crusts from my bread when it comes to junk mail.

seamus

I love how the last two questions in the form are "ATM Pin" and "Social Security Number". Sometimes I think if you're dumb enough to give people that information, you deserve to be scammed.

Minto

Just had a look at the link, its not a bad job. Still, like seamus said, if you answer those questions, you deserve what you get!

Guy:Incognito

Do they build a whole fake site or if you click,say, security centre, does that link to the real security centre on the real paypal site? ie is the only fake/phising part the actual part looking for username/password etc?

Stekelly

Stekelly wrote:

I always make a point of going into them and "logging in" with insults as usernames and passwords etc. I like to think it annoys the scammer when he reads it.

So do I, but I first remove the leading text string from the URL that (may) identify the email that the spam was sent to first.

jank

They are also using the www.paypal.us Domain Name.

If they ask for a password enter in one that you know that fake let them waste their time!!

Mac daddy

Just got one aswell..... sent to my Gmail account
Firefox ftw attached screenie :cool:


PayPal Accounts Management Inbox
from Account Review Department <no-reply@google.com> hide details 9:22 am (6 hours ago)
date Jul 10, 2007 9:22 AM
subject PayPal Accounts Management
Dear valued PayPal member,

It has come to our attention that your PayPal account information needs to be updated as part of our continuing commitment to protect your account and to reduce the instance of fraud on our website. If you could please take 5-10 minutes out of your online experience and update your personal records you will not run into any future problems with the online service.

However, failure to update your records will result in account suspension. Please update your records on or before July 12, 2007.

Once you have updated your account records, your PayPal session will not be interrupted and will continue as normal.

To update your PayPal records click on the following link:
http://61.252.31.3/icons/LOGIN/update/online/index.php



Thank you,
PayPal Update Team

_CreeD_

Deleted User wrote:

So do I, but I first remove the leading text string from the URL that (may) identify the email that the spam was sent to first.

Guys unless you are running something like NoScript or Sandboxie this is a VERY bad idea. There are a myriad of ways they can load Malware from the site to your PC, even to the point of embedding code in the images, I doubt they draw the line at a simple Phish. If it's dodgy, stay away completely.

_CreeD_

_CreeD_ wrote:

Guys unless you are running something like NoScript or Sandboxie this is a VERY bad idea. There are a myriad of ways they can load Malware from the site to your PC, even to the point of embedding code in the images, I doubt they draw the line at a simple Phish. If it's dodgy, stay away completely.

I run this from within a virtualbox (free version of vmware) session, should be OK