Notification of Limited Account Access - PayPal Phishing

Here's an example of another phishing attempt against Paypal users. This time phishers claim that PayPal has developed a new security method intended to protect account information. Phishing e-mail asks you to verify your account data at PayPal by visiting the given link which appears to be genuine but it actually isn't. Please note that PayPal never send their users emails requesting personal details. So, in this case, you will be taken to a phishing website where your details will be captured for the phishers and then used to compromise your PayPal account. If you've received the following phishing email, please mark it as spam and delete it from your inbox.

Content of the phishing email:

Dear PayPal member,


Our company has developed a new security method intended to protect our members account information, therefore adatabase update is required to keep up to date your online account profile. To proceed, you will have to complete our online account verification form by clicking the following link...

Legitimate website: https://www.paypal.com/
Phishing website: http://forzieri-italia.com/paypal/
Return email address: support@epay.com

Here's a screenshot of the phishing email:



Share this information with your friends:

Apple - Important information about your Apple ID

Phishing attempt against Apple ID users. Emails claiming to be from Apple are being spammed in an attempt to steal your Apple ID account information. Spammers claim that need to enable new security features {1-Click Settings}. Email content:

To turn on your 1-Click Settings, simply
click the link below. This security features
is required for all Apple
Customers.

Please note that the link will expire three hours after this email was sent.

Turn on your 1-Click Settings

Legitimate website: https://appleid.apple.com
Phishing website: http://www.d1161791.domain.com/store.apple.com.apple.webobjects.dkstore.woa.920064043.wo.6uo0v7jz7lnt2uf5c8lxytk7afp.2.0.16.9.5.13.0.0.2.1.1.5/

Here's a screenshot of the phishing email:



And here's the Windows Live phishing website:




Share this information with your friends:

Windows Live Re-activate your account Phishing

Phishing attempt against Windows Live users. This phishing email appears to be from Microsoft, however, the return email address clearly indicates that it's not genuine. Phishers claim that your account information is incorrect. You need to re-activate your account by logging into your Windows Live account. Although, the anchor text for an URL link is disguised as a legitimate URL, it actually redirects you to infected Word Press blog where the phishing web page is hosted. I have to admit that the phishers have made very realistic copy of Windows Live login screen. So, if you've received the following phishing email, please delete it from your inbox.

Legitimate website: http://www.hotmail.com/wlive&react/h02/index.php
Phishing website: http://gynecolog.net/wp-content/themes/jio/index.php
Return email address: Hotmail.Inform.2011@windowslive.198.171.144.251.-.co.uk.com

Here's a screenshot of the phishing email:



And here's the Windows Live phishing website:



Share this information with your friends:

Receipt for your payment to Skype Phishing

Phishing attempt against Paypal users. Phishers send a phishing email that appears to be from Paypal and ask to confirm transaction information. You sent a payment of [] to Skype. If you haven't authorized this charge you can visit Paypal help center to get a full refund. However, the anchor text of the given URL is misleading. It looks like a legitimate URL but takes you to a fake spoof website which looks pretty much the same as the legitimate one. Basically, this is a very common attempt to steal personal information and to gain access to your Paypal account.

Legitimate website: https://www.paypal.com/uk/helpscenter/claim_refunds
Phishing website: http://www.qingshan-edu.com/p/info/index.html
Return email address: paypalferdiloun@narvitam.com

Here's a screen shot of the phishing email:



And here's the phishing website:



Share this information with your friends: