also @ TechSpot: JPR: Nvidia GPU shipments are up despite turbulent PC market

› ›

PayPal vulnerability leaves users open to fraud

By Justin Mann

On June 16, 2006, 3:39 PM

PayPal users be cautioned, there is another security vulnerability that has been discovered with the PayPal system that goes a step beyond the “Your account is disabled” e-mails. This phishing technique actually uses a valid PayPal URL and even provides a valid security certificate, but uses an injection technique to override PayPal's page and redirect to a 3rd-party site. Due to the browser having valid URLs, many could easily be fooled into supplying the 3rd-party site with PayPal credentials, of course leaving them open to being ripped off. As the warning mentions, people using the Netcraft toolbar won't be affected as it automatically blocks the 3rd-party site (now that it has been discovered), but many others probably won't be so lucky

No tags on this story

4 comments

User Comments: 4

Got something to say? Post a comment
  1. June 16, 2006 4:07 PM
    DragonMaster said:
    Also, when I receive PayPal e-mails in an e-mail account that isn't even suscribed to it, I just don't trust this.What to look for : Real PayPal e-mails have your username in them!
    Reply
  2. June 17, 2006 4:23 AM
    Julio said:
    In general, it's a bad idea to click email links to anything related to your Paypal or bank accounts, same goes with eBay accounts, etc.
    Reply
  3. June 17, 2006 9:44 AM
    DragonMaster said:
    [quote] In general, it's a bad idea to click email links to anything related to your Paypal or bank accounts, same goes with eBay accounts, etc.[/quote]Especially since the real PayPal mails tell you to open your browser and type paypal.com manually instead of click the link in the e-mail...
    Reply
  4. June 17, 2006 5:21 PM
    DragonMaster said:
    [url]http://news.com.com/PayPal+fixes+phishing+hole/2100-7349
    3-6084974.html?tag=nefd.top[/url]Fixed!
    Reply

Recently commented stories

Post a new comment

Social Login & Guest Posting TechSpot Members
Login here or sign up for free,
it takes about a minute.
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.
TechSpot on:

Most Popular

Trending Featured
More Trending Topics

Featured on Cameras

Downloads and Drivers

Downloads   Drivers  

WinMPG Video Convert 9.3.5

TurboFTP 6.30.940

Wise Youtube Downloader 1.23

System Cleaner 7.3.2.280

aTube Catcher 3.8.1390

More Downloads

Latest Discussion

HDD vs USB vs SSD boot 6 replies on Storage and Networking

How to remove write protection of USB mass storage with no visible lock/unlock 12 replies on Storage and Networking

Moar Free Dota2 6 replies on Gaming

Graphics Card Question 5 replies on Audio and Video

Unsure if my new graphics card will work with my PC 7 replies on Audio and Video

More Recent Discussion

Subscribe to TechSpot

Get free exclusive content, learn about new features and breaking tech news.