ANOTHER Paypal message alert phishing email, looks real. Don’t fall for it!
Paypal message alert “password blocked” phishing email — be cautious !!
If you receive the following email in your hotmail/gmail or any email account, do not follow the embedded link. With the recent announcement of Paypal holiday shopping deals mails of free or 20% off discount mails from Paypal, the following phishing emails will undoubtedly become more and more the norm.
Your Online PayPal Password was blocked on 15/12/2007
Log In into your account to resolve the problem.
Click here to Log In
From: PayPal (Alert@paypal.us)
Sent:Sat 12/15/07 1:59 AM
The email From: address is Alert@paypal.us. However, the “Mailed-by:” domain is mail.megaserve.net. The link redirects to a website which looks very much like Paypal.
Here are all mail source originations headers for geeks :
Received: from mail.megaserve.net ([188.8.131.52]) by bay0-mc9-f1.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
Fri, 14 Dec 2007 22:59:04 -0800
Received: from User ([184.108.40.206])
by mail.megaserve.net (Merak 8.9.1) with ASMTP id USV90651;
Sat, 15 Dec 2007 08:58:51 +0200
Subject: Message Alert!
Date: Sat, 15 Dec 2007 08:58:49 +0200
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-OriginalArrivalTime: 15 Dec 2007 06:59:04.0790 (UTC) FILETIME=[FAE77760:01C83EE7]
If did follow the link and entered your Paypal Account username and password, immediately visit Paypal’s Account Management.
I’m luck enough to have Norten Internet Security installed on my PC and it immediately alarmed me with this message “Fradulent webpage blocked”