Tuesday, 1 July 2008

Identity theft, Part 2

PayPal has been quick to respond to my report. Yes, they confirmed this morning that the email I purportedly received from them is a phish. PayPal has already taken steps to thwart the phisherman's attempt to steal PalPal users' passwords. Here's what happened when anyone now clicks on the CANCEL TRANSACTION link in the email:


The first warning message. PayPal has done something to intercept the link and displays this warning sign in its place. But I'm amazed that there's still a link at the bottom to allow people to continue further:


The second warning message. Now Firefox gets into the act. If by this stage you are still not convinced that the email is a phishing attempt, you can go ahead to report it. But I doubt you'll want to go this far, do you?

No comments: