[KLUG Members] Attention Paypal users:

Bruce Smith members@kalamazoolinux.org
25 Mar 2002 09:01:16 -0500


*** I felt this was important enough to post to the members list,
*** but it is off topic - reply to the Advocacy list only, please!

I recently received a newsletter from Paypal, and found a couple 
things a little odd.  After a closer look, I noticed:

1)  It was sent to an email of mine where I do NOT have an account.
2)  It came originated from an DSL line in Japan.
3)  It links to a different domain, but similar to, paypal.com.

I believe this is a scam, linking people there and used to hijack their
accounts.  The email was probably an exact copy of a paypal newsletter,
with the links changed.  The bogus web page is an exact copy of the
paypal login screen, except it does NOT have a SSL/secure connection.

Be careful when you login to paypal!  If the domain is not paypal.com
and you enter your login & password in anything else, you are supplying
it to a cracker who will probably use that info to empty your account!

I reported this to paypal.com Saturday evening, but haven't heard
anything back yet.  If anyone knows of another good place to report this
email scam, please let me know.

--------------------------------------------
Bruce Smith                bruce@armintl.com
System Administrator / Network Administrator
Armstrong International, Inc.
Three Rivers, Michigan  49093  USA
http://www.armstrong-intl.com/
--------------------------------------------