Feeds

Fax-back phishing scam targets PayPal

Retro racket

Next gen security for virtualised datacentres

Phishers have gone retro with a scam that tries to dupe victims into faxing their banking details to fraudsters. Scam emails, (screengrab) which pose as messages from online payment outfit Paypal, urge users to fax back account information instead of the more usual tactic of handing over details to a bogus website.

Would-be victims are told the information is needed to investigate an alleged security breach involving an attempt to reset their password (have the lads from Lagos developed a sense of irony here?). The scam email points to a Microsoft Word document on a Polish website. Recipients are instructed to download and complete with their bank account details (including PIN information), credit card numbers and login details before faxing back to what ostensibly appears to be a freephone number in the US. Sophos has confirmed that the telephone number mentioned in the emails is hosting an active fax machine. It's unclear whether the phone is actually located in the States or is being redirected elsewhere.

Sophos has reported the scam emails to eBay and is awaiting a response. "The phishing gang may have made a huge blunder by including the fax number in their scam. PayPal and the authorities are sure to follow that lead when investigating this matter further," said Graham Cluley, senior technology consultant for Sophos. "In the last few days we have seen a number of attempts by phishers to use this technique, and it's possible that some people who know that they need to be careful about entering their confidential information on a bogus website may think that completing and faxing back such a form is somehow safer."

He added that the change in tactics by phishers was likely an experiment possibly prompted by the effect of greater public awareness on response rates to conventional phishing scams. ®

The essential guide to IT transformation

More from The Register

next story
Goog says patch⁵⁰ your Chrome
64-bit browser loads cat vids FIFTEEN PERCENT faster!
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
Chinese hackers spied on investigators of Flight MH370 - report
Classified data on flight's disappearance pinched
NIST to sysadmins: clean up your SSH mess
Too many keys, too badly managed
Attack flogged through shiny-clicky social media buttons
66,000 users popped by malicious Flash fudging add-on
Think crypto hides you from spooks on Facebook? THINK AGAIN
Traffic fingerprints reveal all, say boffins
prev story

Whitepapers

A new approach to endpoint data protection
What is the best way to ensure comprehensive visibility, management, and control of information on both company-owned and employee-owned devices?
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Maximize storage efficiency across the enterprise
The HP StoreOnce backup solution offers highly flexible, centrally managed, and highly efficient data protection for any enterprise.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.