New Twist ~ PayPal Phishing email - Just Arrived

[Grrilla]

This is one of the more deceptive phishing scam emails I've come across and it just arrived this morning. As usual, on the surface, everything looks like the real deal. This one has a bit of a new twist, (for me, anyways). If you follow the link, you land on a page that looks like a PayPal page, however, the address bar shows an IP address and the page is a redirect to, I assume, a site where they will be info mining.

From: Paypal Notice (underlying)-> ([email protected])<- (Give away)
Subject: New email address added to your account
Date: November 23, 2005 5:20:15 AM PST
To: undisclosed-recipients:; <- (Give away)
Reply-To: Paypal Notice(underlying)-> ([email protected])<- (Give away)


You have added [email protected] as a new email address for
your PayPal account.


If you did not authorize this change or if you need assistance
with your account, please contact PayPal customer service at:

Ed: **As a precaution, I don't follow links from a bogus page and, unless you have solid anti-spy/malware protection and/or are up for digging deeper, my suggestion is to not follow the redirect, either.


https://www_paypal.com/us/wf/f=ap_email <- The Twist

http://221.133.0.22:8000/1st/index.php<- (The redirect from this landing page which was cloaked in above link), is the tipofff)




Thank you for using PayPal!
The PayPal Team


Please do not reply to this e-mail. Mail sent to this address cannot
be answered. For assistance, log in to your PayPal account and choose
the "Help" link in the header of any page.
-----------------------------------------------------------------
PROTECT YOUR PASSWORD

NEVER give your password to anyone and ONLY log in at
https://www.paypal.com/. Protect yourself against fraudulent websites
by opening a new web browser (e.g. Internet Explorer or Netscape)
and typing in the PayPal URL every time you log in to your account.
-----------------------------------------------------------------



PayPal Email ID PP389401
FITPSRLYGHDGBMJGJVSDRFKDNUNVMJOZQWXYCB

 

[mole]

Thanks for the heads up, la.

 

[kjmz]

They are sure coming up with good scams these days. With the keyloggers and now this I don't feel protected anymore. It's really hard to be safe on the net.