I received two of those fake emails today and thought that it would be a good opportunity to dissect it to show how phishing emails try to lure customers into a trap. The first and most obvious hint that something is wrong with this email is if you think about the subject of the email.
Do you have an account at JP Morgan Chase Bank ? If not delete the message immediately. Users from outside the United States should delete it as well especially if they only have bank accounts in their native language which is not English. It becomes a little bit complicated if you are a customer of that bank.
If you do read the mail completely you soon realize that the mail body does not contain a single word about JP Morgan Chase Bank anymore but only about PayPal. The mail ends with ‘Sincerely, PayPal Account Review Department’
Those factors are only indicators that something is wrong. Take a look at the only link in that email, it does show a PayPal url, but is it really one ? If you hover the mouse over the link the destination of that link is shown in the status bar of Thunderbird.
The link is pointing to a Swiss website and not to paypal.
If you visit that link which should not be a problem if you use Opera or Firefox you come to a website that looks like PayPal. Now it is beginning to get interesting, lets take a look at that website and find out about the differences to the original PayPal website and how one would be able to spot them.
- The websites look different. This is a good indicator that something is wrong.
- The Phishing website does not use the https protocol and it does not show a PayPal url
- The Verisign logo at the bottom is blurred at the Phishing website
- Username and Password are not automatically filled in if you saved them
The bold indicator is the most important one. If the phishing website would use https you could check the certificate by clicking on the yellow lock to receive further information.
Phishers however mostly rely on users who believe what they see, if it looks like PayPal it must be PayPal.
Read Related Posts
-
How to defeat Phishing
-
Unauthorized Payment Done With My PayPal Account
-
New Phishing Mail Tactics
-
New Phishing Emails Emerge
-
Phishing Protection Tips
-
Gmail And Yahoo Mail Users Now Protected Against eBay And PayPal Phishing Mails
-
Gmail Increases Email Security With Phishing Protection
-
PayPal Login
[...] 原文链接。 I hope you enjoyed reading this post. You may now subscribe to my RSS Feed, scroll down to 留下评论 or get back to the homepage. I recommend Giganews, the ultimate P2P alternative: Read here why [...]