{"id":1562,"date":"2021-01-05T12:44:27","date_gmt":"2021-01-05T09:44:27","guid":{"rendered":"https:\/\/airome.tech\/?p=1562"},"modified":"2023-05-24T10:54:51","modified_gmt":"2023-05-24T07:54:51","slug":"paypal-users-targeted-in-new-sms-phishing-campaign","status":"publish","type":"post","link":"https:\/\/airome.tech\/id\/paypal-users-targeted-in-new-sms-phishing-campaign\/","title":{"rendered":"PayPal users targeted in new SMS phishing campaign"},"content":{"rendered":"

A new SMS-based phishing campaign is doing the rounds that attempts to part PayPal users from their account credentials and sensitive information,\u00a0BleepingComputer<\/a>\u00a0reports. The ploy consists of SMS text messages that impersonate the popular payment processor and inform potential victims that their accounts have been \u201cpermanently limited\u201d and that they need to click on the link to verify their identity.<\/p>\n

\"\"
The fake alert and login page (source: BleepingComputer)<\/figcaption><\/figure>\n

Now, at first glance the message may not seem all that suspicious since\u00a0PayPal may, in fact, impose limits<\/a>\u00a0on sending and withdrawing money. The payment provider usually does so when it suspects that an account has been accessed by a third party without authorization, when it has detected high-risk activities on an account, or when a user has violated its Acceptable Use Policy.<\/p>\n

However, in this case it really is a case of SMS-borne phishing, also known as\u00a0smishing<\/a>. If you click on the link, you will be redirected to a login phishing page that will request your access credentials. Should you proceed to \u201clog in\u201d, your credentials will be sent to the scammers behind the ruse and the fraudulent webpage will attempt to gather further information, including the full name, date of birth address, and bank details.<\/p>\n

\n

Our comments<\/p>\n

<\/p>\n

Dr. Pavel Melnichenko<\/p>\n

Chief Technology Officer<\/p>\n

Typical SMS-phishing case when hackers sent links via SMS. If you click on the link, you will be redirected to a login phishing page that will request your access credentials. Should you proceed to \u201clog in\u201d, your credentials will be sent to the scammers behind.<\/p>\n

Two-factor authentication will be a good adding to security in general. In case of use 2-factor authentication solutions like PayConfirm https:\/\/airome.tech\/payconfirm\/<\/a> for log-in, it is possible to prevent and reasonably reduce such a fraud in your digital channels.<\/p>\n

Your clients will get used to confirm all the operations using in-app secure functions. Any attempt to make any operation using user’s credentials will generate a confirmation request on a user’s device, so such attempts will become obvious. Meanwhile, no-OTP principles of authentication process allow to perform visibility and strong integrity control checks \u2014 thus, “what you see is what you sign”<\/p>\n

Moreover, if any malware is deployed on a smartphone of the user, this fact will be detected and provided to the anti-fraud system installed in a bank.<\/p>\n<\/div>\n

Impersonating the popular payment processor isn\u2019t a novel tactic; after all,\u00a0PayPal is one of the most-spoofed brands in phishing scams<\/a>, and attempts at prying sensitive data out of its users have been around for years. We have previously\u00a0looked under the hood of one such scheme<\/a>.<\/p>\n

Make no mistake, however; threat actors like to switch it up and use multiple flavors of PayPal fraud. While they often tend to use scamming evergreens such as lottery or prize-winning scams that require the user to pay a \u201ctransfer fee\u201d, cybercriminals have also been observed sending out fake invoices masquerading as various charities or relief efforts. We discussed common strategies employed by scheming crooks targeting PayPal users in\u00a0one of our recent articles.<\/a><\/p>\n

Needless to say, if a target falls for any of these ruses, the combination of information could be used for\u00a0identity theft<\/a>, bank fraud or fraudulent purchases. The data could just as well be compiled into lists that are then\u00a0sold to other scammers on dark web marketplaces<\/a>. If the victim also\u00a0recycles their login credentials<\/a>\u00a0across multiple accounts, black hats could infiltrate other accounts, including banking, social media and email accounts.<\/p>\n

Protect yourself<\/h3>\n

To avoid falling victim to any of these attacks, you should always scrutinize any text message or email containing a link. So, if you ever receive anything suspicious purportedly coming from a service you use, contact the service provider directly and verify whether it was sent by them.<\/p>\n

You can also never go wrong with using some form of\u00a0two-factor authentication<\/a>\u00a0to secure your accounts. To bolster your password security, consider using a\u00a0password manager<\/a>.<\/p>\n

<\/div>\n
Reference: https:\/\/www.welivesecurity.com\/2021\/01\/04\/paypal-users-targeted-new-sms-phishing-campaign\/<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"

A new SMS-based phishing campaign is doing the rounds that attempts to part PayPal users from their account credentials and sensitive information, BleepingComputer reports.<\/p>\n","protected":false},"author":5,"featured_media":1565,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[11,31,52,26],"class_list":["post-1562","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-criminal_cases","tag-authentication","tag-banking-security","tag-fraud-cases","tag-sms-phishing"],"translation":{"provider":"WPGlobus","version":"3.0.0","language":"id","enabled_languages":["en","id"],"languages":{"en":{"title":true,"content":true,"excerpt":true},"id":{"title":false,"content":false,"excerpt":false}}},"yoast_head":"\nPayPal users targeted in new SMS phishing campaign - Airome<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/\" \/>\n<meta property=\"og:locale\" content=\"id_ID\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PayPal users targeted in new SMS phishing campaign - Airome\" \/>\n<meta property=\"og:url\" content=\"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/\" \/>\n<meta property=\"og:site_name\" content=\"Airome\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/airometech\" \/>\n<meta property=\"article:published_time\" content=\"2021-01-05T09:44:27+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-24T07:54:51+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/airome.tech\/wp-content\/uploads\/2022\/12\/05-01-2021-mini.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"640\" \/>\n\t<meta property=\"og:image:height\" content=\"360\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Airome Technologies\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@airome_tech\" \/>\n<meta name=\"twitter:site\" content=\"@airome_tech\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Airome Technologies\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/\"},\"author\":{\"name\":\"Airome Technologies\",\"@id\":\"https:\/\/airome.tech\/#\/schema\/person\/4305f9424f28ed17c089815d871cf0fa\"},\"headline\":\"PayPal users targeted in new SMS phishing campaign\",\"datePublished\":\"2021-01-05T09:44:27+00:00\",\"dateModified\":\"2023-05-24T07:54:51+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/\"},\"wordCount\":677,\"publisher\":{\"@id\":\"https:\/\/airome.tech\/#organization\"},\"image\":{\"@id\":\"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/airome.tech\/wp-content\/uploads\/2022\/12\/05-01-2021-mini.jpg\",\"keywords\":[\"authentication\",\"banking security\",\"fraud cases\",\"SMS phishing\"],\"articleSection\":[\"Industrial & Criminal cases\"],\"inLanguage\":\"id-ID\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/\",\"url\":\"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/\",\"name\":\"PayPal users targeted in new SMS phishing campaign - Airome\",\"isPartOf\":{\"@id\":\"https:\/\/airome.tech\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/airome.tech\/wp-content\/uploads\/2022\/12\/05-01-2021-mini.jpg\",\"datePublished\":\"2021-01-05T09:44:27+00:00\",\"dateModified\":\"2023-05-24T07:54:51+00:00\",\"description\":\"Typical SMS-phishing case when hackers sent links via SMS. If you click on the link, you will be redirected to a login phishing page that will request your access credentials.\",\"breadcrumb\":{\"@id\":\"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/#breadcrumb\"},\"inLanguage\":\"id-ID\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"id-ID\",\"@id\":\"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/#primaryimage\",\"url\":\"https:\/\/airome.tech\/wp-content\/uploads\/2022\/12\/05-01-2021-mini.jpg\",\"contentUrl\":\"https:\/\/airome.tech\/wp-content\/uploads\/2022\/12\/05-01-2021-mini.jpg\",\"width\":640,\"height\":360},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\",\"item\":\"https:\/\/airome.tech\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PayPal users targeted in new SMS phishing campaign\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/airome.tech\/#website\",\"url\":\"https:\/\/airome.tech\/\",\"name\":\"Airome\",\"description\":\"Simple. Mobile. Secure. Your mTAS.\",\"publisher\":{\"@id\":\"https:\/\/airome.tech\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/airome.tech\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"id-ID\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/airome.tech\/#organization\",\"name\":\"Airome\",\"url\":\"https:\/\/airome.tech\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"id-ID\",\"@id\":\"https:\/\/airome.tech\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/airome.tech\/wp-content\/uploads\/2020\/02\/logo-206.png\",\"contentUrl\":\"https:\/\/airome.tech\/wp-content\/uploads\/2020\/02\/logo-206.png\",\"width\":206,\"height\":64,\"caption\":\"Airome\"},\"image\":{\"@id\":\"https:\/\/airome.tech\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/airometech\",\"https:\/\/x.com\/airome_tech\",\"https:\/\/www.linkedin.com\/company\/airome\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/airome.tech\/#\/schema\/person\/4305f9424f28ed17c089815d871cf0fa\",\"name\":\"Airome Technologies\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"id-ID\",\"@id\":\"https:\/\/airome.tech\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/cf1864c9ce26e9439ecfb0b95c8af0d14ba56239900be8267722a9e1193e0c98?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/cf1864c9ce26e9439ecfb0b95c8af0d14ba56239900be8267722a9e1193e0c98?s=96&d=mm&r=g\",\"caption\":\"Airome Technologies\"},\"url\":\"https:\/\/airome.tech\/id\/author\/s-dvukhzhennov\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"PayPal users targeted in new SMS phishing campaign - Airome","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/","og_locale":"id_ID","og_type":"article","og_title":"PayPal users targeted in new SMS phishing campaign - Airome","og_url":"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/","og_site_name":"Airome","article_publisher":"https:\/\/www.facebook.com\/airometech","article_published_time":"2021-01-05T09:44:27+00:00","article_modified_time":"2023-05-24T07:54:51+00:00","og_image":[{"width":640,"height":360,"url":"https:\/\/airome.tech\/wp-content\/uploads\/2022\/12\/05-01-2021-mini.jpg","type":"image\/jpeg"}],"author":"Airome Technologies","twitter_card":"summary_large_image","twitter_creator":"@airome_tech","twitter_site":"@airome_tech","twitter_misc":{"Written by":"Airome Technologies","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/#article","isPartOf":{"@id":"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/"},"author":{"name":"Airome Technologies","@id":"https:\/\/airome.tech\/#\/schema\/person\/4305f9424f28ed17c089815d871cf0fa"},"headline":"PayPal users targeted in new SMS phishing campaign","datePublished":"2021-01-05T09:44:27+00:00","dateModified":"2023-05-24T07:54:51+00:00","mainEntityOfPage":{"@id":"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/"},"wordCount":677,"publisher":{"@id":"https:\/\/airome.tech\/#organization"},"image":{"@id":"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/#primaryimage"},"thumbnailUrl":"https:\/\/airome.tech\/wp-content\/uploads\/2022\/12\/05-01-2021-mini.jpg","keywords":["authentication","banking security","fraud cases","SMS phishing"],"articleSection":["Industrial & Criminal cases"],"inLanguage":"id-ID"},{"@type":"WebPage","@id":"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/","url":"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/","name":"PayPal users targeted in new SMS phishing campaign - Airome","isPartOf":{"@id":"https:\/\/airome.tech\/#website"},"primaryImageOfPage":{"@id":"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/#primaryimage"},"image":{"@id":"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/#primaryimage"},"thumbnailUrl":"https:\/\/airome.tech\/wp-content\/uploads\/2022\/12\/05-01-2021-mini.jpg","datePublished":"2021-01-05T09:44:27+00:00","dateModified":"2023-05-24T07:54:51+00:00","description":"Typical SMS-phishing case when hackers sent links via SMS. If you click on the link, you will be redirected to a login phishing page that will request your access credentials.","breadcrumb":{"@id":"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/#breadcrumb"},"inLanguage":"id-ID","potentialAction":[{"@type":"ReadAction","target":["https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/"]}]},{"@type":"ImageObject","inLanguage":"id-ID","@id":"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/#primaryimage","url":"https:\/\/airome.tech\/wp-content\/uploads\/2022\/12\/05-01-2021-mini.jpg","contentUrl":"https:\/\/airome.tech\/wp-content\/uploads\/2022\/12\/05-01-2021-mini.jpg","width":640,"height":360},{"@type":"BreadcrumbList","@id":"https:\/\/airome.tech\/paypal-users-targeted-in-new-sms-phishing-campaign\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430","item":"https:\/\/airome.tech\/"},{"@type":"ListItem","position":2,"name":"PayPal users targeted in new SMS phishing campaign"}]},{"@type":"WebSite","@id":"https:\/\/airome.tech\/#website","url":"https:\/\/airome.tech\/","name":"Airome","description":"Simple. Mobile. Secure. Your mTAS.","publisher":{"@id":"https:\/\/airome.tech\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/airome.tech\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"id-ID"},{"@type":"Organization","@id":"https:\/\/airome.tech\/#organization","name":"Airome","url":"https:\/\/airome.tech\/","logo":{"@type":"ImageObject","inLanguage":"id-ID","@id":"https:\/\/airome.tech\/#\/schema\/logo\/image\/","url":"https:\/\/airome.tech\/wp-content\/uploads\/2020\/02\/logo-206.png","contentUrl":"https:\/\/airome.tech\/wp-content\/uploads\/2020\/02\/logo-206.png","width":206,"height":64,"caption":"Airome"},"image":{"@id":"https:\/\/airome.tech\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/airometech","https:\/\/x.com\/airome_tech","https:\/\/www.linkedin.com\/company\/airome\/"]},{"@type":"Person","@id":"https:\/\/airome.tech\/#\/schema\/person\/4305f9424f28ed17c089815d871cf0fa","name":"Airome Technologies","image":{"@type":"ImageObject","inLanguage":"id-ID","@id":"https:\/\/airome.tech\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/cf1864c9ce26e9439ecfb0b95c8af0d14ba56239900be8267722a9e1193e0c98?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cf1864c9ce26e9439ecfb0b95c8af0d14ba56239900be8267722a9e1193e0c98?s=96&d=mm&r=g","caption":"Airome Technologies"},"url":"https:\/\/airome.tech\/id\/author\/s-dvukhzhennov\/"}]}},"_links":{"self":[{"href":"https:\/\/airome.tech\/id\/wp-json\/wp\/v2\/posts\/1562","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/airome.tech\/id\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/airome.tech\/id\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/airome.tech\/id\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/airome.tech\/id\/wp-json\/wp\/v2\/comments?post=1562"}],"version-history":[{"count":5,"href":"https:\/\/airome.tech\/id\/wp-json\/wp\/v2\/posts\/1562\/revisions"}],"predecessor-version":[{"id":1688,"href":"https:\/\/airome.tech\/id\/wp-json\/wp\/v2\/posts\/1562\/revisions\/1688"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/airome.tech\/id\/wp-json\/wp\/v2\/media\/1565"}],"wp:attachment":[{"href":"https:\/\/airome.tech\/id\/wp-json\/wp\/v2\/media?parent=1562"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/airome.tech\/id\/wp-json\/wp\/v2\/categories?post=1562"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/airome.tech\/id\/wp-json\/wp\/v2\/tags?post=1562"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}