Virus Alert -- Paypal Users Beware
11-19-2003, 10:14 AM
#1
Contributing Member
Thread Starter
Join Date: Oct 2002
Location: Raleigh, NC
Posts: 2,603
Virus Alert -- Paypal Users Beware
any of u guys/gals who use paypal might wanna take a look at this:
http://www.240sxforums.com/forums/sh...ad.php?t=18638
http://www.240sxforums.com/forums/sh...ad.php?t=18638
11-19-2003, 02:56 PM
#3
Contributing Member
Join Date: Mar 2003
Location: Pasadena,ca
Posts: 10,109
ill copy and paste it here...BTW you do need to be a member to see it on that forum.
Original message from Dark-Hawk
Worm variant targets PayPal users - [Computer Security]
Submitted by Forcefire on 11/15/2003 3:32:02 AM Add Comment
A new variant of the MiMail worm, MiMail I, is spreading around the world.
The worm attempts to trick people out of their credit card details by purporting to be from online payment services company PayPal, which is owned by eBay.
An email with the headline 'YOUR PAYPAL.COM ACCOUNT EXPIRES' claims that the company is implementing a new security policy.
The email is especially sneaky in that it correctly advises people not to send out credit card details by email.
But when the attachment in the email (www.paypal.com.scr) is opened the software displays a PayPal-branded window requesting all credit card information.
The worm then mails itself out to all email addresses on the infected hard drive.
"It seems to be following the sun," said Graham Cluley, senior technology consultant at antivirus vendor Sophos.
"Australia, New Zealand and South Africa are all getting hits, and here in the UK of course.
"It's not very widespread at the moment; hopefully people are getting smarter about this worm. What we don't know, however, is how many people are falling for it."
MiMail A, the original worm, was first detected in the wild in August and was originally used to harvest email addresses for spammers.
Removal utilities and virus identity files are available from major antivirus companies.
Original message from Dark-Hawk
Worm variant targets PayPal users - [Computer Security]
Submitted by Forcefire on 11/15/2003 3:32:02 AM Add Comment
A new variant of the MiMail worm, MiMail I, is spreading around the world.
The worm attempts to trick people out of their credit card details by purporting to be from online payment services company PayPal, which is owned by eBay.
An email with the headline 'YOUR PAYPAL.COM ACCOUNT EXPIRES' claims that the company is implementing a new security policy.
The email is especially sneaky in that it correctly advises people not to send out credit card details by email.
But when the attachment in the email (www.paypal.com.scr) is opened the software displays a PayPal-branded window requesting all credit card information.
The worm then mails itself out to all email addresses on the infected hard drive.
"It seems to be following the sun," said Graham Cluley, senior technology consultant at antivirus vendor Sophos.
"Australia, New Zealand and South Africa are all getting hits, and here in the UK of course.
"It's not very widespread at the moment; hopefully people are getting smarter about this worm. What we don't know, however, is how many people are falling for it."
MiMail A, the original worm, was first detected in the wild in August and was originally used to harvest email addresses for spammers.
Removal utilities and virus identity files are available from major antivirus companies.
11-20-2003, 05:15 AM
#4
Contributing Member
Thread Starter
Join Date: Oct 2002
Location: Raleigh, NC
Posts: 2,603
thanx Jynx!
i'm a member at damn near every 240/nissan site, and i have my browser set to automatically log me in, so i don't know which ones require login and which don't.
my bad...
i'm a member at damn near every 240/nissan site, and i have my browser set to automatically log me in, so i don't know which ones require login and which don't. my bad...
11-20-2003, 08:35 AM
#5
Contributing Member
Join Date: Mar 2003
Location: Pasadena,ca
Posts: 10,109
Originally posted by Sil40_Mayhem
thanx Jynx! i'm a member at damn near every 240/nissan site, and i have my browser set to automatically log me in, so i don't know which ones require login and which don't. my bad...
thanx Jynx!
i'm a member at damn near every 240/nissan site, and i have my browser set to automatically log me in, so i don't know which ones require login and which don't. my bad...
Same here man
11-20-2003, 01:05 PM
#7
Contributing Member
Thread Starter
Join Date: Oct 2002
Location: Raleigh, NC
Posts: 2,603
Originally posted by kcnoir
Thax a lot Sil40 and HyJinx.
I've sevaral activiy going with PayPal in the last few weeks digging parts for my baby. Hopefully I'm not infected by this....
Thax a lot Sil40 and HyJinx.
I've sevaral activiy going with PayPal in the last few weeks digging parts for my baby. Hopefully I'm not infected by this....
Thread
Thread Starter
Forum
Replies
Last Post
