warning - a new fake paypal message is going around

[acroyear]

I just got this one:

Dear PayPal valued account holder,

We recently noticed one or more attempts to log in your PayPal account from a foreign IP address and we have reasons to believe that your account was hijacked by a third party without your authorization.
If you recently accessed your account while traveling, the log in attempts may have initiated by you.

However if you are the rightful holder of the account, click on the link below and submit, as we try to verify your account.

Please click here[deleted, but the ip address was numbers only] to login into your PayPal account and then fill in the required informations. This is required for us to continue to offer you a safe and risk free environment.

The log in attempt was made from:

IP address: 89.28.4.49
ISP host: www.foto.md

If you choose to ignore our request, you leave us no choice but to temporally suspend your account.
We ask that you allow at least 48hrs for the case to be investigated and we strongly recommend not making any changes to your account in that time.

Paypal security reminders:

• paypal knows your name and will include it in every email
• any link on paypal will have the host paypal.com in the address and never a numbers-only ip address.
  

I admire the chutzpah of that last bit - "at least 48 hours" (that you don't move any funds away or change your password so we can steal it all).

bleh

still, at least I finally got to use this icon...

Comments

[faireraven.livejournal.com]

I've seen it before... Hate those things.

[dglenn.livejournal.com]

I've lost count of how many of those I've seen.

But I will take this opportunity to mention that, if you select "send me plaintext email instead of HTML" when signing up with outfits like PayPal, and especially if you have a mail reader that doesn't automatically render all the HTML it gets, spotting these things becomes trivially easy -- you don't even need to start reading the pitch to notice it's a phishing message.

Huh. LJ's spell-checker doesn't know 'phishing'.

[eiredrake.livejournal.com]

Don't you just love Phishers?