Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: Is this a paypal scam?
From: Dave Sherohman <esper () sherohman org>
Date: Thu, 18 Mar 2004 12:45:02 -0600

On Thu, Mar 18, 2004 at 10:37:58AM -0600, jschmidt () buhler com wrote:
http://218.62.43.30/verify.html

Signed up for paypal 2 weeks ago, and then this came in the mail as a link 
in a paypal looking html email asking me to confirm by entering my credit 
card/account info.

As PayPal states repeatedly, "You should only share information about
your account once you have logged in to https://www.paypal.com/.";
Not http://218.62.43.30/verify.html.

IOW, yes, it's a scam.  Report it to fraud () paypal com 

If this is a scam, then maybe paypal has some employees passing new 
account info outside the company.

No, it gets sent to everyone whether they have a PayPal account or
not.  Like spam, credit card scams don't even need anything close to
a 1% response rate to be profitable, so they don't care how many
non-PayPal-users get it.

-- 
The freedoms that we enjoy presently are the most important victories of the
White Hats over the past several millennia, and it is vitally important that
we don't give them up now, only because we are frightened.
  - Eolake Stobblehouse (http://stobblehouse.com/text/battle.html)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]