The secure login is not so secure...

Mar 14, 2007 09:30 GMT  ·  By

PayPal, the Internet company that allows users to conduct online financial payments, is now the target of numerous phishers that are looking to obtain financial information and earn money illegally. F-Secure security company reported that PayPal was recently attacked by a group of phishers that designed a similar page and tried to lure the clients into providing their account details. "Spotted yet another PayPal phishing site this morning, running at securelogins. If you log-in, you'll get a prompt about the need to verify your information. Note how the page tries to con you into giving out your debit card number instead of a credit card number, as it would be more useful for these crooks. This domain was registered two days ago - apparently the scam was still at building stage. The domain is owned by Mr. James Sexton Yeah right," F-Secure reported.

So, it look like not even the online financial transactions are safe anymore. Is there any chance to use the Internet with financial purposes but also in a secure way? Well, let me explain you the procedure of a phishing attack. Usually, a phisher creates a similar page with a popular one, in this case PayPal. After the website was developed and published on the Internet, the attackers send numerous e-mail messages to clients from every corner of the world, requiring them to re-login and enter their account information. When the users connect to the site, they are lured by the similar interface and, without having a look at the site address, they write the financial information.

Just after the details are sent, the phishers take them and transfer the money to a single or to numerous bank accounts. Usually, the attackers prefer to send the money to multiple bank accounts to avoid being identified.