CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Another PayPal phishing scam

 
Post new topic   Reply to topic       All -> FavForums -> Phishing, Fraud and Dastardly Deeds [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
darclew3

Cadet
Cadet


Joined: Oct 29, 2007
Posts: 3
Location: USA

PostPosted: Mon Nov 12, 2007 7:36 pm    Post subject: Another PayPal phishing scam
Reply with quote


Dear Customer,

We recently reviewed your account, and we need more information about your
business to allow us to provide uninterrupted service. Until we can collect
this information, your access to sensitive account features will be limited.
We would like to restore your access as soon as possible. We apologise for
the inconvenience.

Why is my account access limited? Your account access has been limited for
the following reason(s): 5 Nov. 2007: We have reason to believe that your
account was accessed by a third party. We have limited access to sensitive
PayPal account features in case your account has been accessed by an
unauthorised third party. We understand that having limited access can be an
inconvenience, but protecting your account is our primary concern. (Your
case ID for this reason is PP-296-201-525.) (Your case ID for this reason is
PP-317-869-028.)
How can I restore my account access?

To get started, please click the link below and login to your account:
https://www.paypal.com/Services/limitation/login_submit.htm/

Best Regards,
PayPal Security Center
PS - This is were it came from:
Received: from pop15.mta.everyone.net (bigiplb-dsnat [172.16.0.19])
by omta18.mta.everyone.net (Postfix) with ESMTP id 5A7FD4016C
for <admin@mail.dytech.com.au>; Mon, 12 Nov 2007 10:51:14 -0800 (PST)
X-Eon-Dm: pop15
Received: by pop15.mta.everyone.net (EON-AUTHRELAY2 - 3f158580) id pop15.4734e9f4.185fb6
for <admin@mail.dytech.com.au>; Mon, 12 Nov 2007 10:51:13 -0800
X-Eon-Sig: Af////9HOKChgcB3qQIAAAAB,e4e286933d70695b39441e57423c404b
Message-ID: <000401c8255c$dd268fd0$8085153f@homewq5x9gagpx>
IT is a bogus email address, sent from the west coast of the USA [PST].

Back to top
View users profile Send private message
s0tet

PIRT Handler


Joined: May 21, 2005
Posts: 2945

Phishing Squad

PostPosted: Tue Nov 13, 2007 1:14 am    Post subject:
Reply with quote

Please submit this to PIRT - and the phish URL if you can locate it.
Thanks!
URL: CastleCops Link/pirt

Back to top
View users profile Send private message Send email
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Phishing, Fraud and Dastardly Deeds All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer