Sunday, December 6, 2009

Phishing: PayPal trapped by her own emails

This is Ted Demme ... so PayPal is the target of phishing he becomes paranoid. The electronic payment service has actually described one of his own emails as fraudulent.

Under the guise of confirming bank information of users of service type attack invites users to follow a link to a page counterfeit, which they must enter their bank details. It is exactly this type of email has recently received Randy Abrams, in charge of education at antivirus editor, but this time it was an email actually legitimately from PayPal.

According to this expert in security and many other colleagues, the real letters should instead invite users to perform the steps in their own way, never include a link, thus ensuring they make the right website. Mr. Abrams has responded to PayPal reminding them this basic rule.

The only answer he received such a letter thanking them for transferring this "suspicious email". PayPal acknowledges further that he has identified "phishing". "By alerting you make a difference," adds the email. But PayPal is unable to differentiate between a real email phishing and legitimate, even when the sender is.

No comments: