CastleCops® - New PayPal Phish

CastleCops received a new Paypal phishing scam which tries to lure Paypal customers into verifying their accounts within 72 hours. If not "verified" the accounts are deleted. This approach is based on "recent changes in Paypal's Service Agreement". Authorities notified of this scam.

The body of the phish:

Dear users of PayPal services,

Due to upcoming year 2006, and recent changes in PayPal's Service Agreement you need to submit additional details on your PayPal account. Starting from 2006 all PayPal accounts will come with complete detailed information! Identity protection matters. And PayPal works day and night to help keep your identity safe.

Identity protection matters. Get Verified!

According the new changes in Service Agreement any unverified account will be deleted from the system in 72 hours after receiving this letter.

Return-Path: jakelucas@server.stgerards.ac.nz
Received: from server.stgerards.ac.nz (p202-124-96-82.southnet.co.nz [202.124.96.82] (may be forged))
by bugsbunny.castlecops.com (8.13.4/8.13.4) with ESMTP id k264gfrH022392
Received: by server.stgerards.ac.nz (Postfix, from userid 1088)
id 20CDB3A19DD; Mon, 6 Mar 2006 16:41:22 +1300 (NZDT)

Links to email and phish site snapshots: [1], [2]

Note: Watch the Mar 6th alerts here.


	2002-2008 © Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 182ppm 0.220s (0.018s) Making cybercriminals unhappy since 2002*