Troy Jessup discusses those bogus PayPal e-mail messages that prey on the fact that most people don't really understand URLs:
"At this point, the email gives you a link to a site that can help you make this happen. The ominous "CLICK HERE" link ;) And to further deceive the user, the link has http://www.paypal.com&cgi-bin@www.someothersite.com plus a Lot of other stuff following this, making it a LONG URL that you would never understand anyway.
"We see http://www.paypal.com on the front of that link. And not understanding URL language, we just click on the link. We are then whisked off to a site that then finishes up the deception. I will ask you for your PayPal username and password. It will then prompt you to change your password, and then verify your new password. Done. ... The next day, while you finish up your latest buy on EBay, you log into PayPal, after finding that the password is somehow still the "OLD" password, and discover that you have NO Money in your account."
Back to CompendiumPost a comment
