The notification looks like it's going to lead users to a phishing website

Nov 19, 2013 15:46 GMT  ·  By

Experts have come across a fake PayPal email that’s used by cybercriminals to distribute malware. At first sight, the bogus notification looks as if it’s part of a phishing scam.

Hoax Slayer reports that the emails are entitled “Confirmation required” and they read:

“To finish signing up for your PayPal account, you must click the link below and enter your password to confirm your identity. Click to activate your account.

After you confirm your identity, you can send money, accept unlimited credit card and bank account payments, use special tools for sellers and receive Customer Service hotline help 7 days a week. You'll pay just a small fee for receiving payments. You'll also enjoy the benefit of Buyer Protection for most items you buy on eBay.

You can also confirm your identity by logging in to your PayPal account at [Link]. Click the ‘Confirm identity address’ link in Notifications and then enter confirmation details.”

The emails might be mistaken for legitimate PayPal notifications, but they have nothing to do with the payment processor. Recipients who click on the links are taken to a hacked website that’s designed to push malware.

Be on the lookout for such emails! Since many people own PayPal accounts, it’s not uncommon to receive such notifications. However, if it sounds important, make sure the links contained in the email point to PayPal.com and not some other unrelated domain.

If you’re a victim of this scam and you’re concerned that your computer might have become infected with malware, scan it with an updated antivirus.

Cybercriminals usually rely on such emails to distribute banking Trojans, so if you’ve performed any banking transactions lately, you might want to change your passwords and keep a close eye on your account.