Security researchers have identified fake emails purporting to be from “PayPal” and being used by cybercriminals to distribute malware. At first glance, the fake notifications appear to be part of a phishing scam.
Hoax Slayer reports that the messages have the title “Confirmation Required” and ask users to confirm their alleged registration to the service:
“To complete the registration for your PayPal account, you must click the link below and enter your code in order to verify your identity. Click to activate your account”
The emails look like legitimate PayPal, but are actually unrelated to the payment service. Recipients who click on the links are taken to a website that has been compromised and is being used to distribute malware.
Users are urged to be especially cautious with the emails they receive, even if they appear to come from trusted senders. In case you have fallen victim to this scam, check your computer with an up-to-date antivirus and change your account passwords.
