Skip to main content

Beware - that PayPal email could be a wallet-draining scam

For cybercriminals engaged in phishing, the key question is - how do they get the malicious email past the email security measures? After all, most email service providers are good at spotting, and blocking, spam and phishing emails. 

Cybersecurity researchers from Avanan have now uncovered that some hackers have gotten quite creative, using payment service providers such as PayPal to distribute phishing emails via fake invoices.

What they’ll do is create a phony PayPal account, and impersonate a major brand. Creating a PayPal account is quick, easy, and most importantly - free. Then, they’d send malicious invoices and requests for payment directly from the service. 

Calling the scammers

Given the (legitimate) nature of PayPal, email service providers can do nothing else but let the email through.

The invoice will look legit. It will have the brand logo, proper wording, but also - a phone number for the victim to call. 

Unless they ignore the invoice altogether, there are two things the victims can do: either pay the invoice, or call the listed phone number. Avanan calls this attack a “double spear”, as in some cases, not only will the hackers have the victim’s email, but also their phone number, which can later be used for new attacks. 

Less than two weeks ago, the researchers notified PayPal of the campaign. The payment service provider is yet silent on the matter, so how they decide to tackle the problem, remains to be seen. 

The researchers suggest everyone that, before calling an unfamiliar service, run a Google search on the number listed with the invoice and check the accounts to see if there were any charges. They should also implement advanced security on their endpoints, that looks at more than one indicator, to determine whether the email is malicious or not, and encourage users to ask their IT support, if they’re not sure about an email’s good intentions.

  • Keep your internet traffic to yourself with the best firewalls right now


Source: TechRadar

Popular posts from this blog

The hidden cost of food delivery

Noah Lichtenstein Contributor Share on Twitter Noah Lichtenstein is the founder and managing partner of Crossover , a diversified private technology fund backed by institutional investors, technology execs and professional athletes and entertainers. More posts by this contributor What Studying Students Teaches Us About Great Apps I’ll admit it: When it comes to food, I’m lazy. There are dozens of great dining options within a few blocks of my home, yet I still end up ordering food through delivery apps four or five times per week. With the growing coronavirus pandemic closing restaurants and consumers self-isolating, it is likely we will see a spike in food delivery much like the 20% jump China reported during the peak of its crisis. With the food delivery sector rocketing toward a projected $365 billion by the end of the decade, I’m clearly not the only one turning to delivery apps even before the pandemic hit. Thanks to technology (and VC funding) we can get a ri

Cyber Monday Canada: Last-minute deals for everyone on your list

Best Cyber Monday Canada deals: Smart Home Audio Phones, Tablets & Accessories Wearables Laptops & PC Components Amazon products Gaming Televisions Cameras Lifestyle & Kitchen Toys & Kids Cyber Monday Canada is here, and retailers are rolling out the red carpet for customers who want to shop for everything from tech to kitchenware to games and everything in between. Unlike years past, Cyber Monday Canada deals look a bit different than normal. Instead of retailers trying to pack their stores with as many shoppers as possible, we're seeing tons of online deals that you can take advantage of from the comfort of your home. We've rounded up our favorites below, so feel free to browse through the best of what Canada Cyber Monday has to offer! This list is being updated with new Cyber Monday deals all the time, so check back often. Spotlight deals It's a Switch Nintendo Switch Fortnite Edition bundle $399.95 at Amazon It's a Switch.

Turn your Raspberry Pi into a full-blown computer with the best screens

So you've already picked up the best Raspberry Pi kit , but you want to be able to actually see things, so you'll need to find the best Raspberry Pi screen. Then, of course, you'll need to find a display to use, regardless of whether you grabbed the Raspberry Pi 4 or even the Raspberry Pi 400 . So we've rounded up the best options to give your mini computer a display worth using. Super low power GeeekPi 7 Inch 1024x600 Capacitive Touch Screen HDMI Monitor Staff Pick This 7-inch capacitive display has a 1024x600 resolution and connects via HDMI. It also only requires 500mAh of power for its backlight. There are two additional USB ports for you to take advantage of and expand and extend. Plus, you won't have to worry about meddling around with any display drivers and can just plug and play this GeeekPi monitor with your Raspberry Pi. $70 at Amazon Ultimate flexibility ASUS VP28UQG 28" Monitor 4K/UHD Flexibility is the name of the game with a Raspber

Peloton Reverses Course, Will Continue to Support Apple GymKit

Earlier this week, Peloton said that it would drop support for Apple's GymKit feature that syncs data to the Health app. Customers were unhappy with the decision and complained to the company, leading Peloton to announce a change in plans. Peloton on Thursday said that after listening to member feedback on GymKit, the integration will continue to be offered. Peloton wanted to stop offering GymKit integration in favor of the Peloton One-Tap tracking feature, but GymKit has been a key feature on the $2,500 Bike+ since its 2020 debut , and other Peloton machines since 2022. After listening to Members’ feedback about discontinuing Apple GymKit integration for Bike+, we have decided to continue offering Apple GymKit integration. As a Member-first company, we are always grateful to our Members for sharing their views. — Peloton (@onepeloton) February 16, 2024 The One-Tap tracking app does monitor distance, pace, and heart rate metrics, but only basic information is synced t