account limited ! update your account information

More Paypal fraud on the way. This time spoofing a domain that only sounds like Paypal:

Subject:     account limited ! update your account information
From:     Paypal Service Inc <Service@nopaypal.com>

Of course many recipients are not going to notice the minor variation and will simply ignore that this mail claims to come from “nopaypal.com” rather than “paypal.com” while it actually comes via spam friendly servers like:

caracalla.lunariffic.com ([216.227.214.143])

The actual emails look like this:

account limited - update your account information

Click for Larger Image

The email contains the almost standard security warning/threat:

We recently have determined that different computers have logged into your account, and multiple password failures were present before the login.

Therefore your account has been limited.

It then goes on to suggest you view an attached file and comply with the enclosed directions. In this case the actual fraud payload is contained in an attachment named:

PayPaI.Access.Limited.html

Be aware that as an almost universal rule, whenever any institution emails you requesting that you “update your account information” by way of an email attachment then you should know that you’re either being Phished by a con artist or dealing with a firm that can’t be trusted.

A smart move by the Phishing fraud author is that the links to the PayPal “Help” and “Security Center” are actually legitimate. This helps the email bypass many spam filters.

The spammer here also includes a randomly generated “PayPal Email ID” at the very end of the email, also helping evade spam filtering.

 

- -

OnlyMyEmail is an award winning hosted spam filtering service and business email hosting provider. Our enterprise cloud computing anti-spam solution, the MX-Defender, has the highest capture rate of any spam filter ever tested in the VBSpam Challenge, blocking a record setting 99.9993% of all malicious and junk email.

Our Personal spam filtering system is also a Software as a Service (SaaS) solution and has won both the PC World "World Class Award" and also the PC Magazine "Editor's Choice Award."

OME-Kids is a webmail solution that protects children from spam and other harmful emails. OME-Kids offers unique Parental Controls that allow you to choose the level of security and oversight that's right for your child.

Tags: , , ,

Comments are closed.