Posted By:
Jeff S Hi all,
I just got two e-mails that I'd imagine will reach some of you, too.
The first has been discussed here before -- an e-mail purporting to be from eBay, requiring you to verify your account information. Looks just like the eBay sign in page, only in an e-mail.
The other was more clever--this one claiming to be from PayPal. (TechSupport@PayPal.com is the return address.)
It also asks for verification, but not in the e-mail itself--it provides a link to:
https://www.paypal.com/cgi-bin/webscr?cmd=_login-run
If you cut and paste that link from the e-mail message, you're safe--you go to an actual paypal page.
However, if you click on the link, you actually go to a page on the server http://www.cgi53-paypal.com ... Thus, the scam. You think you're headed to a paypal page, and then you type in your password, which the bad guys then collect.
I know most of you are pretty savvy about this stuff, but the paypal e-mail is worse than usual, and I thought it warranted a mention.