PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : PayPal Phishing ?



rumbarumbatätärräää
16.12.2004, 18:36
Moinsen allerseits,
heute bei mir aufgeschlagen:
Von: service [at] paypal.com
Betreff: Please Update Your Account Information
Datum: 16. Dezember 2004 xx:xx:xx MEZ
An: meinName [at] irgendwo.de
Antwort an: service [at] paypal.com
Return-Path: <service [at] paypal.com>
Envelope-To: meinName [at] irgendwo.de
Delivery-Date: Thu, 16 Dec 2004 xx:xx:xx +0100
Received: from [66.235.201.125] (helo=sac1) by mxng16.kundenserver.de with esmtp (Exim 3.35 #1) ID: [ID filtered]
Content-Type: text/html;iso-8859-1
X-Priority: 3
X-Library: Indy 8.0.25
Message-ID: [ID filtered]
_______________________________________________________________________
Dear valued PayPal&reg; member:

It has come to our attention that your PayPal&reg; account information needs to be
updated as part of our continuing commitment to protect your account and to
reduce the instance of fraud on our website. If you could please take 5-10 minutes
out of your online experience and update your personal records you will not run into
any future problems with the online service.

However, failure to update your records will result in account suspension.
Please update your records on or before December 21, 2004.
Once you have updated your account records, your PayPal&reg; session will not be
interrupted and will continue as normal.
To update your PayPal&reg; records click on the following link:
http://www.paypal.com/cgi-bin/webscr?cmd=_home

Thank You.
PayPal&reg; UPDATE TEAM

Accounts Management As outlined in our User Agreement, PayPal&reg; will
periodically send you information about site changes and enhancements.
Visit our Privacy Policy and User Agreement if you have any questions.
http://www.paypal.com/cgi-bin/webscr?cmd...privacy-outside (http://www.paypal.com/cgi-bin/webscr?cmd=p/gen/ua/policy_privacy-outside)
_______________________________________________
Anzumerken ist noch: ich bin überhaupt nicht PayPal-Kunde.
Ich bin mal dem angegebenen Link gefolgt und habe auf der LogIn-Seite ein Phantasie-Passwort und eine erfundene ID: [ID filtered]
Man landet dann auf dieser Seite: http://smtp.brain.net.pk/cgibin/referrals.htm
Interessant auch, daß ich "meinen" PayPal-Account ohne Probleme mit rein erfundenen Kreditkartennummern, Adressen und Schimpfwörtern "aktualisieren" konnte.
_________________________________________________
Der Dumme ist voll Zuversicht, der Kluge voller Zweifel.

rumbarumbatätärräää
19.12.2004, 00:04
ich habs zu PayPal geschickt und die haben folgendermaßen geantwortet:
Dear H. S.,
Thank you for contacting PayPal.
Thank you for bringing this suspicious email to our attention. We can
confirm that the email you received was not sent to you by PayPal. The
website linked to this email is not a registered URL authorized or used
by PayPal. We are currently investigating this incident fully. Please do
not enter any personal or financial information into this website.
If you have surrendered any personal or financial information to this
fraudulent website, you should immediately log into your PayPal Account
and change your password and secret question and answer information. Any
compromised financial information should be reported to the appropriate
parties.
If you notice any unauthorized activity associated with your PayPal
transaction history, please immediately report this to PayPal by
following the instructions below:
1. Log in to your account at https://www.paypal.com/ by entering
your email address and password into the Member Log In box
2. Click on the Security Center at undsoweiter undsoweiter

If you have any further questions, please feel free to contact us again.
Sincerely,
PayPal Account Review Department

_________________________________________________
Der Dumme ist voll Zuversicht, der Kluge voller Zweifel.