PDA

View Full Version : PayPal fixes phishing hole



sammy
18-06-2006, 12:36 PM
Hi
PayPal has fixed a flaw in its Web site to block a sophisticated scam designed to obtain sensitive data from members, the payment service said Friday.
By exploiting the flaw, attackers were able to redirect people from a PayPal Web page to an online trap located in South Korea, a representative for the service said. The page actually has a real PayPal URL, but hosts malicious code that presents a message warning members that their account had been compromised. It then redirects them to a "phishing" Web site.
At the malicious, information-thieving Web site, people are asked for their PayPal login information, experts at Netcraft, an Internet monitoring company in England, said in an advisory. Subsequently, the scammers are urged to enter their Social Security number and credit card details, Netcraft said.
"As soon as we became aware of this scheme, we changed some of the code on the PayPal Web site. So this scheme, or any scheme like it, can no longer be effective," Amanda Pires, a PayPal spokeswoman, said in an interview.
PayPal, a unit of online auctioneer eBay, is working with the Internet service provider that hosts the malicious site to get it shut down, Pires added. The company has no information on how many people may have fallen victim to the scam, she said.


http://news.zdnet.com/2100-1009_22-6084974.html
Sammy

berley
18-06-2006, 08:59 PM
well here's hoping it works although i very much doubt it :(

boabness
19-06-2006, 12:29 AM
i got that, it never even got noticed with the ebay tool bar. the only thing that made me think was the email that the link was sent in. looked fishy so a sent it to paypal. and they told me no to put any o ma details in it as it was a phishing site. thank feck a never.

mobzzuk
10-07-2006, 09:23 PM
its good that theyve actually sorted it coz i happen to use paypal quite a lot. i mean i dont wanna be hit again. i lost 300 quid in november last year to an ebay scammer - it was partly my own stupidity and dont wanna lose money again