Ancestors

Written by Aaron Turner on 2025-01-28 at 03:16

lol. #PayPal has been sending emails from #scammers on their behalf for 2+ years now? Full SPF/DKIM authentication? Any email from “service@paypal.com” is suspect. All links are valid. But be sure to call the number and talk to your scammer today!

=> View attached media

=> More informations about this toot | More toots from synfinatic@infosec.exchange

Written by Aaron Turner on 2025-01-28 at 03:18

[#]PayPal #scammers @briankrebs reported on this literally years ago and PayPal haven’t fixed it. Amazing focus on protecting their customers. https://krebsonsecurity.com/2022/08/paypal-phishing-scam-uses-invoices-sent-via-paypal/

=> More informations about this toot | More toots from synfinatic@infosec.exchange

Written by Mike LaBonte on 2025-01-29 at 17:05

@synfinatic @briankrebs 3 #paypal #phishing emails so far, supposedly I requested money from an Apple Store. Verified the suspect emails came from a paypal.com server and wrote to phishing@paypal.com.

This happened one day after PayPal rejected payment to bebird.com, a #China-based #Shopify (the PayPal payment URLs were real).

Thanks to Brian for the 2022 article. Any idea what info was needed to create a compromised PayPal Business account?

=> More informations about this toot | More toots from mikelabonte@mastodon.social

Toot

Written by BrianKrebs on 2025-01-29 at 17:23

@mikelabonte @synfinatic Well they are creating fake business accounts and/or hijacking existing ones. In my experience, it tends to be mostly the latter.

=> More informations about this toot | More toots from briankrebs@infosec.exchange

Descendants

Written by Mike LaBonte on 2025-01-29 at 17:45

@briankrebs @synfinatic Aha, of course. Yes, the 3 emails greeted me in light font with a person's name and 2 businesses. So the latter.

=> More informations about this toot | More toots from mikelabonte@mastodon.social