PayPal is a widely used financial service that allows people from all over the world to transfer money to other PayPal users by simply specifying an email address the money should be send to. It has become even more popular in recent years with the eBay tie-in which practically made PayPal the preferred payment method for many eBay users. A financial service that popular is a priority target for worms, phishing attacks, trojans and other kinds of attacks that try to steal PayPal login information in order to transfer money from the PayPal account to another one.
PayPal recently began to sell a so called PayPal Security Key to protect PayPal users from phishing attacks. The system works by protecting the login to the account not only with a username and password but also a security key that is generated on the fly on an external device. Attackers who are able to steal PayPal login information would need physical access to the security key to be able to log into the account at a later time.

