Anti-Phishing Blog


Wednesday, September 07, 2005

Phishers target NCUA.GOV

Phishers are at it again, this time targeting a federal agency. Emails circulating with a spoofed sender of ncua.gov and a SUBJECT line of: Account info Verification are attempting to entrap users to devulge personal information.

We've posted a sample of the email here.

Be on the lookout and alert users to this latest phishing scam.


Thursday, September 01, 2005

Dead Giveaway

It was easy to see that this email, which arrived this morning, was a sham. It started out "Dear PayPal." The link contained in the email looks like it would go to a subpage within the PayPal site, but when you hold your mouse arrow over it, you quickly discover that's not the case. It goes to an IP address associated with a company in Florida . . .

Dear PayPal,

We recently noticed one or more attempts to log in to your PayPal account
from a foreign IP address.

If you recently accessed your account while traveling, the unusual log in
attempts may have been initiated by you. However, if you did not initiate
the log ins, please visit PayPal as soon as possible to verify your
identity:

[URL deleted]

Verify your identity is a security measure that will ensure that you are
the only person with access to the account.

Thanks for your patience as we work together to protect your account.

Sincerely,
PayPal
------------------------------------------------ ----------------
PROTECT YOUR PASSWORD

NEVER give your password to anyone and ONLY log in at
https://www.paypal.com/. Protect yourself against fraudulent websites by
opening a new web browser (e.g. Internet Explorer or Netscape) and typing
in the PayPal URL every time you log in to your account.
----------------------------------------------------------------

Please do not reply to this e-mail. Mail sent to this address cannot be
answered. For assistance, log in to your PayPal account and choose the
"Help" link in the header of any page.

PayPal Email ID PP321
QTRKOIXRCPWTJQQNIGBCNUHFSKPZJBYWSYHCPI