Reply to thread

Message

<blockquote data-quote="Rishi" data-source="post: 470968" data-attributes="member: 46160">Got this phising attempt in one of my junk mailboxes twice, involving PayPal asking me to &quot;continue replacing my security information&quot;.It is interesting to note they have used PayPal banner in the email but the link is not only suspicious but redirects to a hosted webpage which looks like a spoofed copy of PayPal without the secure padlock of course!(.php).The scammer does not know I don&#039;t use PayPal anyways.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite116" alt=":D" title="Big grin&nbsp; &nbsp; :D" loading="lazy" data-shortname=":D" /> See below :Phising Attempt : To continue replacing your security information, click the button URL redirects to :&nbsp; some url.com<a href="http://www.virustotal.com/url/f06004342a62638188a6463e1c2f38957e9c1e66db72ae6dd4d9f5fc5f335e35/analysis/" target="_blank">..../modules/navigator/auth/&nbsp; </a>[ATTACH]80743[/ATTACH] Virustotal scan results: Seems like a new site[ATTACH]80741[/ATTACH] Remedial measures taken : Duly reported to paypal ,US-Cert and APWG. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite114" alt=":cool:" title="Cool&nbsp; &nbsp; :cool:" loading="lazy" data-shortname=":cool:" />too bad they don&#039;t know I am a MT user.</blockquote>

[QUOTE="Rishi, post: 470968, member: 46160"] Got this phising attempt in one of my junk mailboxes twice, involving PayPal asking me to "continue replacing my security information".It is interesting to note they have used PayPal banner in the email but the link is not only suspicious but redirects to a hosted webpage which looks like a spoofed copy of PayPal without the secure padlock of course!(.php).The scammer does not know I don't use PayPal anyways.:D See below : [SIZE=5][COLOR=#ff0000][B][COLOR=#000000]Phising Attempt[/COLOR] :[/B][/COLOR][/SIZE] [COLOR=#ff0000][B]To continue replacing your security information, click the button [/B][/COLOR] [SIZE=5][B]URL redirects to : [SIZE=4][COLOR=#ff0000]some url.com[URL='http://www.virustotal.com/url/f06004342a62638188a6463e1c2f38957e9c1e66db72ae6dd4d9f5fc5f335e35/analysis/']..../modules/navigator/auth/ [/URL][/COLOR][/SIZE][/B][/SIZE] [SIZE=5][B][SIZE=4][COLOR=#ff0000][ATTACH]80743[/ATTACH] [/COLOR][/SIZE][/B][/SIZE] [SIZE=5][B][SIZE=4][COLOR=#ff0000][/COLOR][/SIZE][/B][/SIZE] [COLOR=#ff0000][SIZE=4][B]Virustotal scan results: [COLOR=#000000]Seems like a new site[/COLOR][/B][/SIZE][/COLOR] [ATTACH]80741[/ATTACH] [SIZE=5][COLOR=#ff0000]Remedial measures taken :[/COLOR][/SIZE] [B]Duly reported to paypal ,US-Cert and APWG. [/B]:cool: too bad they don't know I am a MT user. [/QUOTE]

Verification