Phishing Attack – PayPal Account

Scammers behind this PayPal scam send PayPal users an official looking email asking them to verify their account or identity. The email is addressed as “Dear PayPal Customer” and the email looks like an official PayPal email. It also carries an .html file as an attachment.

The mail misguides users by saying “You have added a new email address for your PayPal account”. Furthermore, the mail creates an illusion that if the user feels an unauthorized person has changed his account, then he can keep his old email and restore his PayPal account by downloading the attached form and filling it.

When the user opens the .html file, it displays a dummy page of “PayPal my account” and asks to fill in personal and confidential information such as name, phone no., credit card details etc.

If a user fills up this information and clicks on ‘Submit’ then all the confidential information is transferred to the attacker.

The above image shows the link where this information is transferred. We request all readers to pay close attention while dealing with such fraudulent mails.

Ranjeet Menon