Researchers at ESET, an internet security company, have discovered a new phishing scam targeting PayPal users. The phishing email looks like a regular email warning users about a login attempt from a new browser or device. The email recipient is instructed to verify his or her identity by clicking on a bit.ly link which then redirects to a threat actor-controlled webpage where they are prompted to enter their login details.
Once the unsuspecting user enters their credentials, a form requesting the victim’s billing information, credit card details, Social Security number, and ATM or debit card PIN appears. If these details are entered, then the user is directed to another page where they are prompted to upload a copy of valid government issued photo ID, passport, driver's license, or credit card.
Attackers usually resort to familiar, effective techniques, like phishing scams, to gain access to email accounts. A smart tool like Exchange Reporter Plus enables organizations to stay ahead of attackers by monitoring for and thwarting email-bound cybersecurity threats. Download a free, 60-day trial of Exchange Reporter Plus today.
Exchange Reporter Plus provides a host of reports that can help you locate suspicious emails, both sent and received, based on keywords in their subject or body. Often times, these malicious emails appear to be valid, tricking users into opening the emails and clicking on links embedded in them, which can cause serious damage.
With Exchange Reporter Plus, you can locate emails based on:
In addition, ManageEngine O365 Manager Plus provides an advanced Office 365 mailbox content search capability that identifies phishing emails by analyzing internet message headers, subjects, attachments, and bodies of emails. With this feature, you can identify senders' email addresses, the platform used by the attackers, and the servers the emails passed through.
Start your free, 30-day trial of O365 Manager Plus today to try out all these features.
Subscribe to our digest to get your weekly dose of cyber security updates straight to your inbox.
© 2019 Zoho Corporation Pvt. Ltd. All rights reserved.
You will receive weekly cybersecurity news soon!