PayPal customers are being targeted by a new type of phishing email that tries to trick users into calling a phone line to confirm their credit card details.
The email, which purports to come from PayPal , claims that the recipient's account has been the subject of fraudulent activity. However, unlike normal phishing emails, there is no internet link or response address. Instead, the email directs the recipient to call a phone number and verify their details. When dialled, users are greeted by an automated voice saying:
"Welcome to account verification. Please type your 16 digit card number."
Once the credit card details are entered, the scammer is free to steal the credit information for their own use.
Spyware analysts SophosLabs are warning users not to respond to the email. Graham Cluley, senior technology consultant at Sophos said "Though it's an American telephone number, the fact that PayPal is used globally means that anyone could potentially be tricked into making the call."
|
|