JaBbA's Hut

A report in the ISC Handler's Diary yesterday suspects that Paypal phishers may actually be targeting people by putting in a change password request (which the user will then reject, because they didn't try to change the password) and then sending the "Your account may have been compromised" email. Kind of like a baseball pitcher setting you up with the outside fastball then coming in with a cutter. No idea whether this is real or coincidence, but it sure sounds like an effective attack to me.

A slightly more clumsy approach was used by the "Prophetyaweh" website, which tries to get people interested in the fact that "UFOs and spaceships appear on my signal" to sign up for $7.95 at paypal. The thing is:

When you create your Pay Pal account, you must use the same email address and password that you put in the fields below.

Apparently the UFOs and spaceships appear because he has paypal logins to give them.