Phishing Alert / Malicious Code: PayPal Traffic Redirection

charlesvar · 2005/11/05

Websense® Security Labsâ„¢ has received reports of a new attack that targets users of PayPal. The attack begins with a spoofed email phishing message that provides a link to download the executable "PayPal security tool" file. The executable, named 'PayPal-2.5.200-MSWin32-x86-2005.exe', is a Trojan Horse which modifies the DNS server of the local workstation and then deletes itself. All future requests for 'paypal.com' will be transparently redirected to a phishing website. This same DNS server could also be used to redirect requests for additional websites, but it currently appears to only redirect 'paypal.com'.
Click to expand...

http://www.websensesecuritylabs.com/alerts/alert.php?AlertID=329

Regards - Charles

BOBBO · 2005/11/05

According to snopes.com, there's another PayPal phishing operation going on, this one involving Citibank:

Is Citibank sending out notices asking customers to log in and verify their accounts?
...yet another redirection scam (also known as "phishing ") intended to deceive recipients into disclosing their credit card numbers, bank account...
Sat, 05 Nov 2005 12:40:55 GMT http://www.snopes.com/inboxer/scams/citibank3.asp
Click to expand...

Log in or Sign up

Phishing Alert / Malicious Code: PayPal Traffic Redirection

charlesvar Inactive Alumni Thread Starter

BOBBO Geek Member

Share This Page

Log in or Sign up

Phishing Alert / Malicious Code: PayPal Traffic Redirection

charlesvar Inactive Alumni Thread Starter

BOBBO Geek Member

Share This Page

Useful Searches