PayPal Phishing Scam Uses Invoices Sent Via PayPal
Summary: Scammers are sending invoices through PayPal.com itself that claim a user's account is about to be charged hundreds of dollars, and the emails pass all validation checks as genuinely sent by PayPal because they come from a compromised or fraudulent PayPal Business account. Recipients who call the toll-free number in the invoice are asked to download remote administration software, and KrebsOnSecurity reported the details to PayPal's anti-abuse team on a Wednesday in August 2022.
Key Takeaway: The invoice and every link in the email live on paypal.com, so delivery and domain trust are already settled - the only remaining control is whether an employee calls the number and hands over remote access to their machine.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026