full-disclosure - Is this a paypal scam?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: macecil at comcast.net (Michael Cecil)
Subject: Is this a paypal scam?

jschmidt@...ler.com wrote:

 >http://218.62.43.30/verify.html
 >
 >Signed up for paypal 2 weeks ago, and then this came in the mail as a link
 >in a paypal looking html email asking me to confirm by entering my credit
 >card/account info.
 >I've only purchased 1 thing since signing up; it was from ebay from a
 >longtime seller with nearly 100% positive feedback, and I received the
 >equipment as expected.
 >If this is a scam, then maybe paypal has some employees passing new
 >account info outside the company.
 >
 >-jamie-

Short answer:  Yes, it is a scam.

I don't have any paypal account (and never will) but I routinely get these 
kind of emails.  I get them apparently from banks and credit card companies 
as well.

Good rule of thumb - never click on a link in email.  Always use your 
existing  known-good URL for paypal (or whatever), then check the site for 
security announcements, etc.
-- 
Michael Cecil
macecil@...cast.net
http://home.comcast.net/~macecil/howto/
http://home.comcast.net/~antiviruscd/