YouTube video by MegaLag

YouTube video by Boyd Clewis

YouTube video by Scambaiting and Timewasting

A real-looking scam hiding in plain sight

BREAKING: Honey has just been TERMINATED from the Rakuten network. Email below shared by a user on LinkedIn. Additionally, Honey's Rakutens links are no long...

Betrüger missbrauchen das „No-Code Checkout“-Feature für raffinierte Phishing-Attacken. Wir erklären die ausgefeilte Masche. Der Artikel <a href="https://tarnkappe.info/artikel/it-sicherheit/online-betrug/neuer-paypal-scam-feature-no-code-checkout-fuer-phishing-missbraucht-310927.html">Neuer PayPal-Scam: Feature &#8222;No-Code Checkout&#8220; für Phishing missbraucht</a> erschien zuerst auf <a href="https://tarnkappe.info">TARNKAPPE.INFO</a>

YouTube video by MegaLag

An apparently Bay Area-based con artist was on the verge of scamming an elderly Atherton man out of $15,000, but fortunately his caregiver and family intervened, and the would-be con artist was taken ...

New PayPal phishing scam uses fake address change emails to steal user data. #PayPalScam #Phishing #Cybersecurity

 Hackers have found a clever way to misuse PayPal's legitimate email system to send authentic looking phishing scams that are able to bypass security filters and look genuine to the end users. Over the last few weeks, users are complaining that they are receiving emails from PayPal's legitimate address "service@paypal.com" informing that their automatic payment has expired. The emails successfully pass all the usual security checks such as DKIM and SPF authentication and have proved to be coming directly from PayPal’s mail servers.  One of the reasons these messages are potent is that the scammers have altered the Customer Service URL to take users to their own websites from where they can see fake purchase notifications, claiming victims have purchased high-priced electronics such as MacBooks, iPhones, or Sony devices for USD 1,300 to 1,600. The spam text message contains Unicode characters which can make the words bold or in different fonts, all this is to help to get round spam filters and keyword detection. Instead, the messages tell recipients to call a phony “PayPal support” phone number to cancel or dispute the alleged charges.  BleepingComputer's analysis of logs and transactions shows that the PayPal Subscriptions feature is being abused by scammers. When merchants hold a subscriber's subscription, they can do so with their own mechanism, and PayPal, in turn, will notify subscribers via email. PayPal seems to be vulnerable to a subscription metadata attack - perhaps in an API or legacy platform - which lets attackers insert arbitrary text in the Customer Service URL field (it normally only accepts valid URLs).  The scammers can forge emails and register a fake subscriber account for an email address associated with Google Workspace mailing list. When these accounts receive the notification from PayPal, the mailing list service sends what looks like a legitimate e-mail from PayPal to the list of "victims", making it looks more and more like a scam. Safety measures Recipients should ignore these emails and avoid calling the provided phone numbers. These tactics historically aim to facilitate bank fraud or trick victims into installing malware on their devices . PayPal confirmed awareness of the scam and recommends customers contact support directly through the official PayPal app or website if they suspect fraudulent activity. Users concerned about account compromise should log into their PayPal account directly rather than clicking email links to verify whether any unauthorized charges actually occurred.

YouTube video by MegaLag

YouTube video by MegaLag