Cybercriminals are trying to lure users to a fake PayPal login page

Apr 4, 2013 21:01 GMT  ·  By

Most security savvy users are probably aware that cybercriminals often try to cause panic when they attempt to convince internauts to open attachments or click on malicious links. This latest PayPal scam is no different.

Recipients of emails entitled “Unread message from PayPal” are notified that their PayPal accounts have been deleted.

“This message confirms that your PayPal Account was deleted. If you didn't delete your account, click on the link below to restore access immediately: Recover account. PayPal Accounts can only be restored within a short period of time after deletion,” the bogus notifications discovered by Hoax Slayer read.

Users who fall for the trick and click on the “Recover account” button are taken to a website that replicates PayPal. Here, they’re asked to provide account information.

All the information entered on the fake PayPal website is stored in a file controlled by the attackers.

As always, users are advised to ignore such emails and delete them. In case you’re a victim of this scam, change your PayPal password immediately. If you fear your bank account could become compromised, contact your financial institution.