Browsing tag

PayPal

Threat Actors Using Legitimate PayPal Accounts To Distribute Chthonic Banking Trojan

While many email providers, clients, and anti-spam engines have become adept at detecting spam, malicious messages sent via high-profile, legitimate providers are much harder to catch. Threat actors continue to look for new ways to bypass these engines and, in the latest example of innovative approaches to malware distribution, have managed to co-opt PayPal services […]

Scammers Using Genuine PayPal Emails to Spread Banking Malware

Another day another PayPal scam — This time, it’s highly sophisticated and comes from a genuine PayPal email address! PayPal like other financial institutions is a favorite target of scammers, crooks and cyber criminals. Recently there has been an increase in PayPal related phishing scams but now researchers have also identified criminal elements using PayPal’s legitimate emails to spread […]

PAYPAL FIXES CSRF VULNERABILITY IN PAYPAL.ME

PayPal recently fixed a vulnerability on its PayPal.me site that could have let an attacker change a user’s profile without permission. The issue stemmed from a cross-site request forgery (CSRF) vulnerability that existed in PayPal.me, a site the company launched last year to let its users request money; similar to what Venmo, another property it […]

YouTube’s Popular Channels WatchMojo and Redmercy Hacked

Hackers are taking over some of the most popular YouTube channels despite having two-factor authentication enabled on their accounts! A group of hackers calling themselves ”Obnoxious and Pein” is on a hacking spree where they are taking over popular YouTube channels and renaming videos title with their own. The recently hacked YouTube channels include popular WatchMojo […]

Beware; Latest PayPal Phishing Scam Comes From Irish Government Email

Irish Government Emails Used in Latest PayPal Phishing Scam — Scammers are targeting your inbox with “Your Account Will Be Limited” phishing scam with terrible English skills! Cybercriminals and scammers try their best to adopt the most sophisticated techniques so users can be tricked into giving away their personal and financial information. In the past, we witnessed […]

PayPal flaw allowed hackers to send malicious emails

PayPal has just fixed a security vulnerability that could have been exploited to send malicious emails to users via its platform. Researchers at security firm Vulnerability Lab have discovered a filter bypass and an application-side input validation vulnerability that allowed attackers to inject malicious code into emails sent by the PayPal platform. “A persistent input validation & mail encoding […]

New PayPal Phishing Scam asks you to Confirm New Security Question

This PayPal phishing scam tricks users into clicking a fake link and asks for login details — Don’t fall for it! PayPal is probably the most regular recipient of phish scams and perhaps by now its users are also well aware of this fact. However, it is still important to learn about the newest of […]

Crooks Sending Phishing Links in Text Messages To Steal PayPal Account

Text Messages are a Hacker’s Latest Weapon to Dole out PayPal Phishing Scams. The easiest way cybercriminals can try to hack your social media or PayPal account is to drop phishing link or malware straight into your inbox but recently these malicious actors seem to have become experimental. They are probably trying out newer ways […]

PayPal Servers Compromised via Well-Known Java Deserialization Bug

PayPal addresses issue after security researcher broke into their servers and took data files just to prove his point. Michael “Artsploit” Stepankin, an independent security researcher, has discovered a critical security flaw in PayPal’s Manager interface that allowed him to execute malicious code on PayPal’s servers, an issue which would have enabled him to take […]

Learn How to Identify, Protect Yourself from Phishing Scams

Each day we hear about new phishing attacks being carried out by hackers or scammers and despite the continuing awareness from multiple sources and media platforms regarding these attacks, there are still people who continue to fall victim to such attacks. For this very reason, in this article, we will be providing you with all […]

DecryptorMax Ransomware Decrypted, No Need to Pay the Ransom

Emsisoft researchers creates decryption tool.Fabian Wosar of Emisoft has created a tool capable of decoding files encrypted by the DecryptorMax ransomware, also known as CryptInfinite. The ransomware gets its name from the fact that the “DecryptorMax” string is found in multiple places inside its source code. Additionally, the CryptInfinite moniker is also used by some […]

Russians embrace Bitcoins, the West sticks with PayPal

One day, as you’re busy surfing on one of your favorite online stores, you stumble upon a pair of chic shades … they’re the very ones you’ve been looking for, for quite some time. And that’s not it. Best of all, they are really cheap. So you add the sunglasses to your shopping cart, proceed […]

Smart eBay Scammer Tricks, Steals Identity of His Investigating Officer

Rohit Jawa, a 25-year-old man, was arrested in Cincinnati, Ohio on 15th June 2015 for scamming on eBay — He was accused of defrauding eBay customers for making fraudulent purchases. Rohit started his fraudulent operations in 2013 and employed 9 eBay and 18 PayPal accounts for carrying out his fraudulent purchases. He may now face […]

Android Malware Disguises as PayPal App

A recent spam campaign is leading users to a fake PayPal app which steals their real credentials, but also comes hard-coded to target other mobile banking applications. With more and more smartphones being produced and sold around the world, users are changing their daily habits, and instead of checking bank accounts from their desktops, laptops, […]

Researchers Outline Vulnerabilities in Yahoo, PayPal, Magento Apps

Researchers recently discovered a smattering of vulnerabilities in web applications and mobile applications belonging to companies like Yahoo, PayPal, Magento, and Shopify that could have led to account theft, session hijacking, and phishing, among other consequences. Hadji Samir, Ebrahim Hegazy, Ayoub Ait Elmokhtar, and Benjamin Kunz Mejri, researchers with Vulnerability Lab, found the bugs earlier this […]

PayPal XSS Vulnerability Found, Fixed Before Being Exploited

A stored XSS vulnerability was identified and reported by Bitdefender’s staff to PayPal, one that could have been easily used by hackers as an entry point for further attacks. We recently posted an article based on Jack Leonard’s “How XSS Attacks Work” infographic. And as we explained in that post, the difference between reflective and […]

PayPal Users Hit with ‘ASDA Order’ Phishing Scam

A fake email from Paypal is used by hackers to carry out a phishing attack on users. The email says a transaction has been made from your account to Associated Dairies (ASDA), for a product you recently ordered (relevant details in relation to the product are also mentioned). Of course, the receipt is just a way of […]