RE: Misc: New phishing scam trick

Subject: RE: Misc: New phishing scam trick
From: "Darges, Katherine" <katherine -dot- darges -at- defensegp -dot- com>
To: "Geoff Hart" <ghart -at- videotron -dot- ca>, "CEL" <copyediting-l -at- listserv -dot- indiana -dot- edu>, "TECHWR-L" <techwr-l -at- lists -dot- techwr-l -dot- com>
Date: Tue, 9 May 2006 12:55:17 -0400

I just received a new (for me, anyway) scam last night. It was from
PayPal Customer Service so I opened it on my Mac. It was addressed to
me personally both in the "To" line and in the text. It told me that
$765.40 had been charged to my account for a cell phone I had purchased.
I was told that if this was in error I should click on the link to
dispute the charge. Well, I hadn't purchased the cell phone, but I did
have a recent PayPal notice for something I had purchased, so I compared
the two. Except for the ability to click on a link to dispute the
claim, the two notices were the same. The real one didn't have such a
link.

I wonder how many people click on the link because they didn't order
"any stinkin' seven hundred dollar cell phone!"


Katherine Darges
Sr. Management Analyst
National Security Programs Group

-----Original Message-----
From: techwr-l-bounces+katherine -dot- darges=defensegp -dot- com -at- lists -dot- techwr-l -dot- com
[mailto:techwr-l-bounces+katherine -dot- darges=defensegp -dot- com -at- lists -dot- techwr-l -dot- c
om] On Behalf Of Geoff Hart
Sent: Saturday, May 06, 2006 9:18 AM
To: CEL; TECHWR-L
Subject: Misc: New phishing scam trick

Just spotted a clever new variant on the old "your Paypal account has
been compromised" phishing trick. Since this kind of cybercrime is
always a slight possibility, it's worth checking. The way I do this is
to copy the "click here" link into Word to see what the real URL is.
Usually, I get something with an eastern European domain name rather
than the actual PayPal URL.

Today's variant does something unusual and thus, much more likely to
deceive: the first link really does take you to PayPal's security
center. Since you can't actually figure out what to do at that site
without a bit of spelunking, it seems perfectly logical to click the
second link in the mail message, which ostensibly takes you directly to
the place where you can update your account details and fix the problem.

Don't do it: the _second_ link is the phishing scam.

The moral: If you ever get this kind of notification, be it from Paypal
or your bank or your credit card company or whatever, go to that
location yourself: manually type the URL in your browser. Don't ever
click on the link in an e-mail, since (as this example shows), the
phishers can be exceptionally clever at tricking us. If you can't figure
out whether there's really a problem, or how to solve it, you may even
have to resort to calling their 800 number--or send them an e-mail. If
there really is a problem, they'll help you fix it. If there isn't
they'll tell you that too.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - --
Geoff Hart ghart -at- videotron -dot- ca
(try geoffhart -at- mac -dot- com if you don't get a reply) www.geoff-hart.com
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

WebWorks ePublisher Pro for Word features support for every major Help
format plus PDF, HTML and more. Flexible, precise, and efficient content
delivery. Try it today!. http://www.webworks.com/techwr-l

Doc-To-Help includes a one-click RoboHelp project converter. It's that
easy. Watch the demo at http://www.DocToHelp.com/TechwrlList

---
You are currently subscribed to TECHWR-L as
katherine -dot- darges -at- defensegp -dot- com -dot-

To unsubscribe send a blank email to
techwr-l-unsubscribe -at- lists -dot- techwr-l -dot- com
or visit
http://lists.techwr-l.com/mailman/options/techwr-l/katherine.darges%40de
fensegp.com


To subscribe, send a blank email to techwr-l-join -at- lists -dot- techwr-l -dot- com

Send administrative questions to lisa -at- techwr-l -dot- com -dot- Visit
http://www.techwr-l.com/techwhirl/ for more resources and info.

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

WebWorks ePublisher Pro for Word features support for every major Help
format plus PDF, HTML and more. Flexible, precise, and efficient content
delivery. Try it today!. http://www.webworks.com/techwr-l

Doc-To-Help includes a one-click RoboHelp project converter. It's that easy. Watch the demo at http://www.DocToHelp.com/TechwrlList

---
You are currently subscribed to TECHWR-L as archive -at- infoinfocus -dot- com -dot-

To unsubscribe send a blank email to
techwr-l-unsubscribe -at- lists -dot- techwr-l -dot- com
or visit http://lists.techwr-l.com/mailman/options/techwr-l/archive%40infoinfocus.com


To subscribe, send a blank email to techwr-l-join -at- lists -dot- techwr-l -dot- com

Send administrative questions to lisa -at- techwr-l -dot- com -dot- Visit
http://www.techwr-l.com/techwhirl/ for more resources and info.


Previous by Author: Re: Your telephone setup?
Next by Author: RE: sharing an office
Previous by Thread: RE: Misc: New phishing scam trick
Next by Thread: TECHWR-L Dinner at STC 2006


What this post helpful? Share it with friends and colleagues:


Sponsored Ads