PayPal Phishing for German customers with innovative social engineering technique

Posted By: Sorin Mustaca August 5, 2015

Nothing special in this phishing email in German from the “PayPal Team” asking to click in order to unlock your PayPal account.

PayPal – Informationen erforderlich!

Hallo Ihr PayPal-Konto ist vorübergehend gesperrt. Sie können keine weiteren Zahlungen bei PayPal tätigen.

Um die Sperrung Ihres Kontos aufzuheben und die Entfernung all Ihrer aktiven Fälle sowie weitere AGB Widerrufe, müssen Sie die fehlende Informationen eintragen.

Bitte gehen sie wie folgt vor. Die Seite Jetzt loslegen aufrufen und die Schritte durchführen.

The first screens ask for PayPal account and name of the owner, so all is standard for this kind of phishing.

In the screen below (3rd) the fraudster ask for the standard Credit Card, for the maximum amount of money that can be paid with the credit card.

What is new is that additional request for the account number ! They actually require the standard bank account behind the credit card.

This way they would be able to book money twice: once from the Credit Card, once from the bank account directly.

Interesting evolution, isn’t it?

Check www.endpoint-cybersecurity.com for seeing the consulting services we offer.

Visit www.itsecuritynews.info for latest security news in English
Besuchen Sie de.itsecuritynews.info für IT Sicherheits News auf Deutsch

Sorin Mustaca

Sorin Mustaca, (ISC)2 CSSLP, CompTIA Security+ and Project+, is working since over 20 years in the IT Security industry and worked between 2003-2014 for Avira as Product Manager for the known products used by over 100 million users world-wide. Today he is CEO and owner of Endpoint Cybersecurity GmbH focusing on Cybersecurity, secure software development and security for IoT and Automotive. He is also running his personal blog Sorin Mustaca on Cybersecurity and is the author of the free eBook Improve your security .