A new phishing scam is targeting PayPal users around the world. This phishing scam asks users to verify their account in 48 hours in order to protect their account.
This phishing scam email reads,
Dear Client,
This is an automatic message by the system to let you know that you have to confirm your account information within 48 hours.
Your account has been frozen temporarily in order to protect it.The account will continue to be frozen until it is approved And Validate Your Account Information.
Once you have updated your account records, your information will be confirmed and your account will start to work as normal once again.This will help protect you in the future. The process does not take more than 5 minutes.
Phishing email also contains a link to fake login page of Paypal.
URL of the phishing page was
http://paypal.verify.bank.information.falcon-cement.com/6f2da711caaee0cfe1251fa59487b694/limit-id=21/your-account/updating/uptodate/logme.php
I am sure you can see that domian is falcon-cement.com which is not a Paypal service. Google Chrome already blocks the page and shows security warning. But we are not sure about the other browsers.
If a user clicks on the link and enters account details, account details will be sent to the phishing page owner. After entering login credentials, it asks users to fill the profile and credit card information. I am sure you can understand that this fake page is created to steal card details of users.
Phishing pages are created in a way that it look legitimate.
This is not the first time when Paypal users are under the phishing attack. We have already seen this kind of phishing attack many times.
We recommend users not to clicking on links in this kind of images. To identify phishing pages, you should always check the URL of the page before entering login information or other payment information. If you are not sure, you should manually open paypal in the new browser tab.
We also recommend users to read this articles on Fake emails and Phising Pages to learn how to protect their account from these kinds of scams.
