Wednesday, July 22, 2009

Beware From phishing mail Pay Pal Members

Pay Pal Members Beware From Phishers and Cyber criminals

Dear Friends,

    Now we are producing before you about two fraud emails which was seemed to be generated from Pay Pal and it came to one of our team member and then feeling it suspicious he mailed the entire content to Pay Pal and in response what Pay Pal said we are producing that before you for your future reference. 

Here is the suspected mail from spammer with its header file which was sent to Pay Pal for verification:-

Form Message
customer subject: English
customer message: Additional Information: 'I received this mai on
##/##/#### and was it from yours?

"Dear PayPal member,

We're sorry. We are not able to process your recent reply to our email.
We are the processor for the email surveys for PayPal and are not
directly linked to the PayPal customer service center.

Please respond through the survey link imbedded in the original email
you received from us.

Thank you and we apologize for the inconvenience.

PayPal Survey Partner"

This is the header:-
Delivered-To: kept hidden##@gmail.com
>Received: by 10.115.60.18 with SMTP id n##cs######wak;
> Mon, ## Jul #### ##:##:## -#### (PDT)
>Received: by 10.140.203.3 with SMTP id
a#mr#######rvg.###.#############;
> Mon, ## Jul #### ##:##:## -#### (PDT)
>Return-Path: <>
>Received: from mail.benchmarkportal.com (mail.echosurvey.com
[###.###.##.###])
> by mx.google.com with ESMTP id
##si########pzk.###.####.##.##.##.##.##;
> Mon, ## Jul #### ##:##:## -#### (PDT)
>Received-SPF: neutral (google.com: 207.166.99.104 is neither permitted
nor denied by best guess record for domain of mail.benchmarkportal.com)
client-ip=###.###.##.###;
>Authentication-Results: mx.google.com; spf=neutral (google.com:
207.166.99.104 is neither permitted nor denied by best guess record for
domain of mail.benchmarkportal.com) smtp.mail=
>precedence: bulk
>in-reply-to: 94dd4f4c0907201044pa3ba0ct@mail.gmail.com
>return-path: <>
>Date: Mon, ## Jul #### ##:##:## -####
>Message-Id:
>from: "paypal.feedback"
>to:
>subject: Automatic Response'
 

Now what Pay Pal replied:- 

Dear Name Kept hidden,

Thank you for contacting PayPal.

Hi Kept hidden! I have read your email and understand your concern over the
email you received. Let me assist you further.

If you think the email you received did not match the description I have
included below please forward the email you received to
'spoof@paypal.com'.

PayPal frequently issues surveys in attempt to find more ways to improve
our service and accommodate your needs.

  * If you receive a survey from PayPal, or a third party vendor on
behalf of PayPal, it will arrive as a link sent to you through email *
  * To get to the survey page, simply click on the link, or paste the
link into your browser's web address box

Please keep in mind that a medium like email allows anyone to send a
message to you. Before entering information into the survey you received
via email, you should verify the source of the email.

* To make sure that the email survey you received was from PayPal,
follow these tips:

  1. You will NOT need to enter your password at any point during the
survey
  2. The survey you received will never ask you for any personal
information
  3. All surveys will address you by first and last name

We appreciate your input, and we thank you for using PayPal!

We know situations like this can be difficult, so thanks for working
with us. If you have more questions, visit our Help Center by clicking
"Help" in the top right corner of any PayPal page.

Sincerely,
A Name is there
PayPal, an eBay Company

Copyright © 1999-2009 PayPal. All rights reserved.
Consumer advisory - PayPal Pte. Ltd., the holder of PayPal's stored
value facility, does not require the approval of the Monetary Authority
of Singapore. Users are advised to read the terms and conditions
carefully.

No comments: