PayPal on Omid Farhang

Embarrassing security failure at PayPal

Thu, 22 Mar 2012 12:56:00 +0000

The H-Security: Until just a few days ago, web sites belonging to the world’s largest online payment service contained a security vulnerability in a key component that could have been exploited by fraudsters to steal information from customers. PayPal fixed the vulnerability shortly after being notified of its presence by The H’s associates at heise Security. The eBay subsidiary was, however, unable to give any information on how such a serious security problem could have remained undetected.

Paypal’s advise: “Use your bank account for your Paypal-payments”. Really ?!

Wed, 01 Dec 2010 14:40:00 +0000

Righard Zwienenberg, Chief Research Officer at Norman posted this on Norman Security Blog, Thanks to Mr.Fagerlid for sharing:

I have been a user of PayPal for many years, actually ever since PayPal opened its services for international users. PayPal, originally only for US citizens, is now used worldwide with local offices in many countries.

From the Dutch affiliate, I just received the next message from PayPal (the actual message was in Dutch, see picture below):

Buggy Paypal phishing

Tue, 12 Oct 2010 13:12:00 +0000

Usually I have to wonder how much inventiveness the spammers and Phishers show. But, from time to time, it is funny to see some really stupid Phishing attempts. I do hope that nobody is falling for these puny attempts to fake Paypal we found today.

The email below is being sent with a German subject line and it is pretending to come from a German mail address, but the mail itself is written in English and it is allegedly pointing to paypal.com instead of paypal.de.

PayPal Phish

Tue, 04 May 2010 11:51:00 +0000

PayPal users are at risk of getting their credentials stolen if they follow instructions given in a scam email.

“We have reason to believe that your account was accessed by a third party…. PayPal will verify it with your bank records for your own protection. If you provide a wrong PIN your account will be suspended or limited for unauthorized account access.”

” Please visit the Resolution Center and complete the steps to remove limitations.”