Bad actors get activate on Christmas Eve, so it is nothing a new news however another incident of scam. This time, an unknown actors used an account named @PaypalChristm which pretended to be an official paypal account tweeted on the famous ‘twitter’ that there is chance of to win prizes just via confirm paypal account.
For your information, PayPal is a multi billion company that has 244 million users. It has asset of worth more than $40 Billion. And, the Twitter is one of the most popular social networks with 335 million users worldwide. Malicious actors used the industry giant’s name to infect computers with malware or to collect confidential data by using scam campaign.
Details about the paypal phishing scam campaign
During the Christmas period, an elaborate tweet was reported on the famous social site the Twitter from an account named @PaypalChristm which camouflaged to be an official PayPal account. The tweet the following:
log onto your account. verify your details.
for your chance to be in Paypal’s new year draw.”
Along with the tweet, there was a picture associated with it that showed a few iPhones and a brand new Macerate car. Who would not want these things especially when these are totally free? However, this one was a scam, and as the users enter their details to login into PayPal account, their banking details got disclosed.
Detail analysis on the text
Looking on the text alone bring many doubts whether it actually come from PayPal official or not. The text has many errors- the name of the company (PayPall in “paypall-christmasgifts.com” and originally it is PayPal), no capital letter are used while starting a sentence etc.
Apart from this, the image that the tweet showed actually does not look official one. Moreover, the @paypalChristm has not even 100 followers. All these are enough to judge that this is something that was designed by some evil actor/actors.
Currently, this scam has been out of action and account shutdown. But, similar scams could be show up in coming future. Therefore, be careful about this. Try to avoid such a shortcut to win hamper prizes. Before providing your personal details, at least search for the legitimacy.