PayPal Phishing Campaign — Steals Sensitive Data

A text message from PayPal found as phishing campaign leading to identity theft of the users.

PayPal Campaign

The faster, safer way to send money, make an online payment, receive money or set up a merchant account.

In addition, targeting consumers with “phishing” scams via text message or SMS (short message service).

Recently, the SMiShing scam increasing rapidly and involves an approach by text message — made to appear as if it is from a bank or other legitimate operation.

Below image is a phishing (smishing) campaign pretends to be from PayPal stating:

“PayPal: We’ve permanently limited your account, please click link below to verify,” the smishing text message reads.

BleepingComputers – **PayPal smishing text and landing page**

On log in on the phishing page, the entered PayPal credentials will be sent to the threat actors.

In addition, then goes a step further as it will try to collect further details from you, including:

name,
date of birth,
address,
bank details, and more.

BleepingComputers – **Collecting personal information from the victim**

On the other hand, the campaign marked as Phishing – according to Google Safebrowsing.

Security Recommendation:

Like phishing emails, never click on suspicious links, instead go to the main site’s domain to confirm if there is an issue with your account.

Importantly, if you receive this text message and logged in to your PayPal account or any other information, immediately visit Paypal.com and change your password.

Moreover, Do not click on a link or call a number within an unsolicited SMS, or submit personal information in response.

Verify a message’s authenticity by finding the purported sender’s website and official contact details online.