As Life Goes Digital

As Life Goes Digital

Technology, Cricket, Deals, Immigration etc …


ANOTHER Paypal message alert phishing email, looks real. Don't fall for it!

ANOTHER Paypal message alert phishing email, looks real. Don’t fall for it!

Paypal message alert “password blocked” phishing email — be cautious !!

If you receive the following email in your hotmail/gmail or any email account, do not follow the embedded link. With the recent announcement of Paypal holiday shopping deals mails of free or 20% off discount mails from Paypal, the following phishing emails will undoubtedly become more and more the norm.

Your Online PayPal Password was blocked on 15/12/2007

Log In into your account to resolve the problem.

Click here to Log In

From: PayPal (Alert@paypal.us)
Sent:Sat 12/15/07 1:59 AM
Reply-to:Alert@paypal.us

The email From: address is Alert@paypal.us. However, the “Mailed-by:” domain is mail.megaserve.net. The link redirects to a website which looks very much like Paypal.

Here are all mail source originations headers for geeks :

X-Message-Delivery: Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
X-Message-Status: n:0
X-SID-PRA: PayPal
X-Message-Info: mzxw1fS161woAt1y0F5AdPiU/VogtoQAJpHt+wNw/Ju1q0+reYpfF0gniOYUEAu66OeMdfjrzLSvU9mO7rxUvHGSZkdJVZIp
Received: from mail.megaserve.net ([196.25.202.211]) by bay0-mc9-f1.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668);
Fri, 14 Dec 2007 22:59:04 -0800
Received: from User ([169.237.118.214])
by mail.megaserve.net (Merak 8.9.1) with ASMTP id USV90651;
Sat, 15 Dec 2007 08:58:51 +0200
Reply-To:
From: “PayPal”
Subject: Message Alert!
Date: Sat, 15 Dec 2007 08:58:49 +0200
MIME-Version: 1.0
Content-Type: text/html;
charset=”Windows-1251″
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: Alert@paypal.us
Message-ID:
X-OriginalArrivalTime: 15 Dec 2007 06:59:04.0790 (UTC) FILETIME=[FAE77760:01C83EE7]

If did follow the link and entered your Paypal Account username and password, immediately visit Paypal’s Account Management.

I’m luck enough to have Norten Internet Security installed on my PC and it immediately alarmed me with this message “Fradulent webpage blocked”

Here is the image:


EMAIL NEWSLETTER

Your Email Address:

Delivered by FeedBurner


Posted By: Kalyan | Date: December 15, 2007 | Categories: OtherNews
Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *