Paypal Spoof email hoax with VIRUS attachment
13th November 2003 and an
EXTENDED WARNING on 21st December

As if we all don't get enough spoof emails, we are now facing a mass virus distribution AGAIN!

Whilst the email purports to be from Paypal, it is not targeting Paypal users alone. This spoof email contains an attachment called www.paypal.com.scr or www.paypal.com.pif which are both actually a quite clever virus...

The www.paypal.com.scr, or www.paypal.com.pif, attachment is virus which creates a web page when opened (not a real web page, it is written by the virus itself). The web page is a fake Paypal page with form which requires your credit or debit card and possibly your Paypal username and password. The virus saves any data you enter and then later sends it to a number of email address intended to collect the it for the scammers.

Virus companies describe the risk as low to medium and removal is easy. Most reputable ISPs and email service providers are blocking this virus, and possibly the email, when they receive it on their incoming mail servers.

This email uses email addresses found in your browser's cache to propogate (thereby ensuring that email addresses used for internet log ins are utilised). While you are reading this, we advise you to go and delete all files in your browser cache as a precaution.

Should you have opened the attachment and you do not have a virus scanner (or it has not recognised the virus), please follow the advice on Symantec's Site which includes instructions for its removal.

Take a good look at the following images, because this spoof email scam may be coming to an inbox near you!

Sponsor
Cheap Professional Web Hosting
with Everyman Hosting

Sponsor
Get an email address
Independent POP3 Email Accounts
with NO advertising
from Inbox 4 Us