Skip to main content

Beware - that PayPal email could be a wallet-draining scam

For cybercriminals engaged in phishing, the key question is - how do they get the malicious email past the email security measures? After all, most email service providers are good at spotting, and blocking, spam and phishing emails. 

Cybersecurity researchers from Avanan have now uncovered that some hackers have gotten quite creative, using payment service providers such as PayPal to distribute phishing emails via fake invoices.

What they’ll do is create a phony PayPal account, and impersonate a major brand. Creating a PayPal account is quick, easy, and most importantly - free. Then, they’d send malicious invoices and requests for payment directly from the service. 

Calling the scammers

Given the (legitimate) nature of PayPal, email service providers can do nothing else but let the email through.

The invoice will look legit. It will have the brand logo, proper wording, but also - a phone number for the victim to call. 

Unless they ignore the invoice altogether, there are two things the victims can do: either pay the invoice, or call the listed phone number. Avanan calls this attack a “double spear”, as in some cases, not only will the hackers have the victim’s email, but also their phone number, which can later be used for new attacks. 

Less than two weeks ago, the researchers notified PayPal of the campaign. The payment service provider is yet silent on the matter, so how they decide to tackle the problem, remains to be seen. 

The researchers suggest everyone that, before calling an unfamiliar service, run a Google search on the number listed with the invoice and check the accounts to see if there were any charges. They should also implement advanced security on their endpoints, that looks at more than one indicator, to determine whether the email is malicious or not, and encourage users to ask their IT support, if they’re not sure about an email’s good intentions.

  • Keep your internet traffic to yourself with the best firewalls right now


Source: TechRadar

Popular posts from this blog

Follow these steps to connect a Pro Controller to your Android phone

Playing games on your smartphone is one of the best ways to entertain yourself. However, it can be tough to play with some games when you're just tapping on a screen. Fortunately, it's possible to sync up a traditional controller. That's where it's nice to connect your Nintendo Switch Pro Controller and get playing on the best gaming phones . By the way, the Playstation 4 controller as well as the Xbox One controller are also compatible with Android devices, if you'd prefer to use one of those. Note: You will only be able to use a Pro Controller if your phone is running Android 10 and if the game you're playing supports controllers. Additionally, the process for syncing the controller with your phone will be different from one phone to the next. How to use Switch controller on Android: Sync Pro Controller to your phone via Bluetooth Do keep in mind that some Android games — including some of the most popular titles like Genshin Impact — don't act

FCC approves broadband 'nutrition labels' to help you shop for internet

The FCC is pushing nutrition labels for internet providers. What you need to know The FCC has voted to move forward with new rules for ISPs to display nutrition labels. The proposed rulemaking would mandate ISPs to display relevant speed and pricing information to consumers. This should make it easier for consumers to make an informed decision on their broadband. The FCC voted unanimously on a plan that would allow consumers to make better decisions about their broadband internet. The proposal will require internet service providers (ISPs) - including many of the best wireless carriers in the U.S. — to display "nutrition labels" that display relevant service information for consumers at point-of-sale. This includes internet speeds, allowances, and clear information on rates. "If you walk into any grocery store and pull boxes of cereal from the shelves, you can easily compare calories and carbohydrates," FCC Chair Jessica Rosenworcel said in a statemen

You can make your new Pixel look like a Teenage Mutant Ninja Turtle

A cool thing about Google’s Pixel 6 series phones is their unique camera bar design . If the finish of that strip were a different color than black — specifically blue, orange, purple, or red — it would totally look kind of like the Teenage Mutant Ninja Turtles . And now that you can’t unsee the resemblance, device outfitter Dbrand would like to help make your Pixel 6 device look like one of your favorite childhood heroes. With Google’s latest phone the Pixel 6a releasing next week , Dbrand decided it's a good time to revisit the sewers and launch its Teenage Mutant Ninja Pixels decals for all three phones. They match the green heroes-in-a-half-shell plus their masks, and include four camera decal strips that reflect the colors of Leonardo, Michelangelo, Donatello, and Raphael. Personally, I think the Pixel 6a’s two-camera array does the best job looking like proper eyes (the spidery camera array of the Pixel 6 and 6 Pro, not so much). Available now for the Pixel 6a: https://

HBO just canceled this comedy, despite its 100% Rotten Tomatoes rating

HBO has canceled animated comedy after three seasons.  Close Enough was created by JG Quintel, the man behind cult comedy Regular Show, who also topped the bill of voice actors, which included Gabrielle Walsh, Jason Mantzoukas, Kimiko Glenn, Jessica DiCicco, James Adomian and Danielle Brooks. Close Enough followed Josh and Emily – and their young daughter Candice – a couple in their late 30s, who live in a Los Angeles duplex with their divorced friends, Alex and Bridgette. The show chronicled their lives as they dealt with everyday challenges, with things frequently taking surreal and sci-fi style turns.  Originally intended to air on TBS in 2017, after a series of delays, the show debuted on HBO Max in 2020. Three seasons of eight episodes each have been broadcast, with the most recent season coming to a close in early April of 2022.  The show has featured a number of high-profile guest stars during its run, including the likes of Jane Lynch, Henry Winkler, "Weird Al"