Security experts have raised the red flag over attacks on users as PayPal warns: Do not pay, do not phone. Here’s what you need to know and do.
Updated October 25 with a statement from PayPal and further advice for users concerned about the latest hacking attack.email circulates. Now, security experts at KnowBe4 have issued a warning for PayPal users as cybercriminals use a genuine PayPal email address to send an invoice.
Paypal itself has responded to this attack with a ‘do not pay, do not phone’ warning. Here’s everything you need to know about the latest scam that could prove costly if you don’t follow the advice given. The latest PayPal attack warning dropped into my email from the folks at KnowBe4 this week, informing me to be aware of a scam that purports to be from PayPal and is even delivered from a genuine PayPal email address. “You receive an email from a real PayPal email address,” the email warned, which “contains an invoice for a large purchase you did not make, and a phone number for you to call if you want to dispute the charge.”is something I have detailed before. A Telephone-Oriented Attack Delivery threat usually contains a PDF invoice or other seemingly official document, along with messaging that uses urgency and fear of financial loss to persuade victims to call an adversary-controlled phone number.of the dangers of this scam. But nevertheless, it would appear, the very same attack is doing the rounds once more.“Cybercriminals create a PayPal account and use it to send you a fake payment invoice,” KnowBe4 warned, “the email you receive is real, but the invoice is not, and if you call the phone number in the email, you will not be connected to PayPal's support team.” Instead, you get through to a threat actor impersonating a PayPal support worker but whose aim is to relieve you of your credit card details in order to refund you, or even ask for a fee to fix your ‘hacked’ account. Scammers can “send fraudulent invoices, send fake messages using the involved messaging services, and even insert fake messages in the company’s ‘refund’ feature,” Roger Grimes, KnowBe4’s CISO advisor, said. “This particular scam, involving PayPal, has been around for many years as well. I’m not sure why PayPal isn’t better at detecting and blocking them,” Grimes concluded. Of course, it’s important to remember that such phishing attacks are not unique to PayPal, with many well-known brands targeted by attackers. The advice is clear: anyone receiving an unexpected or suspicious invoice or payment request, whether it appears to be from PayPal or another service, should not pay it or respond to it. PayPal tells me it is responding to the continual evolution of scamming tactics and methods, taking all the necessary steps to protect customers. These include a combination of manual investigations and technology to prevent fraud, including taking proactive actions like limiting scam accounts or declining risky transactions. But remember, be careful out there. I approached PayPal for a statement, and a spokesperson told me: “We do not tolerate fraudulent activity on our platform and our teams work tirelessly to protect our customers. We are aware of this phishing scam and encourage people to always be vigilant online and mindful of unexpected messages. If customers suspect they are a target of a scam, we recommend they contact Customer Support directly through the PayPal app or our
Paypal Warning Paypal Attack Paypal Phishing Paypal Email Do Not Pay Paypal Do Not Phone Paypal Knowbe4 Paypal Invoice Scam Phishing
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Ghost tapping scam targets tap-to-pay usersAnchor and reporter at News 5 Cleveland
Read more »
Act Now — Google Issues New Emergency Update For 3 Billion Chrome UsersGoogle has issued an emergency update warning for 3.5 billion Chrome browser users across Windows, macOS, Linux and Android platforms. What to know and do.
Read more »
PayPal Users Warned ‘Do Not Pay, Do Not Phone’ As Attackers StrikeSecurity experts have raised the red flag over attacks on users as PayPal warns: Do not pay, do not phone. Here’s what you need to know and do.
Read more »
PayPal Users Warned ‘Do Not Pay, Do Not Phone’ As Attackers StrikeSecurity experts have raised the red flag over attacks on users as PayPal warns: Do not pay, do not phone. Here’s what you need to know and do.
Read more »
Two arrested in $59,000 PayPal scam in Ross CountyTwo individuals have been arrested in connection with a PayPal scam that defrauded a Ross County resident of approximately $59,000.The victim lost $44,000 thro
Read more »
PayPal Users Warned ‘Do Not Pay, Do Not Phone’ As Attackers StrikeSecurity experts have raised the red flag over attacks on users as PayPal warns: Do not pay, do not phone. Here’s what you need to know and do.
Read more »