Warning - Paypal Hoax Email virus

[marcus]

I was sent this earlier from an address [email protected] which my AV triggered as a virus alert, as the attachment was infected by the W32.Paylap@mm virus. Its the first Ive seen of it, and thought Id show you guys.

Dear PayPal member,

PayPal would like to inform you about some important information regarding your PayPal account. This account, which is associated with the email address

[email protected]

will be expiring within five business days. We apologize for any inconvenience that this may cause, but this is occurring because all of our customers are required to update their account settings with their personal information.

We are taking these actions because we are implementing a new security policy on our website to insure everyone's absolute privacy. To avoid any interruption in PayPal services then you will need to run the application that we have sent with this email (see attachment) and follow the instructions. Please do not send your personal information through email, as it will not be as secure.

IMPORTANT! If you do not update your information with our secure application within the next five business days then we will be forced to deactivate your account and you will not be able to use your PayPal account any longer. It is strongly recommended that you take a few minutes out of your busy day and complete this now.

DO NOT REPLY TO THIS MESSAGE VIA EMAIL! This mail is sent by an automated message system and the reply will not be received.

Thank you for using PayPal.

spisiawi

[Square]

Bastads!

*edit* how can they send a false email from the paypal.com domain?

[Shimmyhill]

Its just a reply adddress trick or a relay or a mask !

Ive had a few Paypal false emails of late, feel sorry for the poor gits who get screwed over

[chipsgravy]

I think that this warning should be posted on the main page. As it was only by chance I happened to come into the PC forums. I don't normally bother. It just seems to important to just tuck away in here.

Chip

[Burai]

I had a similar one from "ebay" this morning which not only infects your system, but also links to a page where you can input your credit card details for them to be stolen by sub-human scum.

Beware.

[MartyG]

"how can they send a false email from the paypal.com domain?"

Very easily, the POP3 protocol (on which mail travels) is open to abuse - you can send an email that appears (at least on first glance) to have come from where ever you like. It's not until you delve into the headers you can see it might not be real.

Regards
Marty

[Commander Marklar]

telnet your.pop.server 25

helo whatever
mail from: [email protected]
rcpt to: [email protected]
data

Hello, my name is Susan... I want to rip out your eyeballs and make love to your skull!

Click here to buy Viagra!

.

quit

[Commander Marklar]

You still get info back, although the "From" address is br0ked...

[code:1:99e68c1b5c]
Return-Path: <[email protected]>
Received: from [my.ip.address] by mta06-svc.ntlworld.com
(InterMail vM.4.01.03.37 201-229-121-137-20020806) with SMTP
id <20031115211805.XZVX19402.mta06-svc.ntlworld.com@[my.ip.address]>
for <my.email.address>;
Sat, 15 Nov 2003 21:18:05 +0000
Message-Id: <20031115211805.XZVX19402.mta06-svc.ntlworld.com@[my.ip.address]>
Date: Sat, 15 Nov 2003 21:18:05 +0000
From: <[email protected]>

Hello, my name is Susan... I want to rip out your eyeballs and make love to your skull!

Click here to buy Viagra!
[/code:1:99e68c1b5c]

[Shimmyhill]

Got this one today wit a attachment, be warned

Dear PayPal member,

We regret to inform you that your account is about to be expired
in next five business days. To avoid suspension of your account
you have to reactivate it by providing us with your personal information.

To update your personal profile and continue using PayPal services
you have to run the attached application to this email. Just run it
and follow the instructions.

IMPORTANT! If you ignore this alert, your account will be suspended
in next five business days and you will not be able to use PayPal anymore.

Thank you for using PayPal.

[Geezer]

Every single day, a new scam
The way to deal with them is to never open the attachments or follow the links. If ebay or paypal want you to take some action, when you log in at their sites they will alert you to it!

[Damrabbit]

Got this one today wit a attachment, be warned

Dear PayPal member,

We regret to inform you that your account is about to be expired
in next five business days. To avoid suspension of your account
you have to reactivate it by providing us with your personal information.

To update your personal profile and continue using PayPal services
you have to run the attached application to this email. Just run it
and follow the instructions.

IMPORTANT! If you ignore this alert, your account will be suspended
in next five business days and you will not be able to use PayPal anymore.

Thank you for using PayPal.

I've just recieved this one as well today so be warned it is still going round ft:

[Bassman]

I am a moderator at the Gran Turismo Forums and as such receive email intended for the site. This "Paypal" email has been arriving over the last week or more. My Norton Anti-Vius is more than happy to deal with it so I have had no problems.