A new phishing attack targeting PayPal users has been confirmed, described as a 'phish-free' scheme that utilizes legitimate email notifications from PayPal to deceive users into granting attackers access to their accounts. This method, reported by Fortinet's Chief Information Security Officer Carl Windsor, highlights the evolving tactics employed by cybercriminals. The attack is part of a broader trend in online security threats, with additional reports indicating that a WordPress plugin facilitating phishing has surfaced on Russian cybercrime forums.
A @WordPress plugin designed to facilitate phishing of online shoppers has emerged on Russian cybercrime forums, @slashnextinc reported. #cybersecurity #infosec #ITsecurity https://t.co/xRlQWAUEyz
A novel PayPal phishing campaign hijacks accounts: https://t.co/WGYzYcj7DG by Security Affairs #infosec #cybersecurity #technology #news
A recent PayPal phishing scheme uses email notifications from the legitimate PayPal service address to trick users into giving attackers control of their accounts, @Fortinet CISO Carl Windsor reported. #cybersecurity #infosec #ITsecurity https://t.co/yNQoNrPOA4