1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Scammer Alert - PayPal Phishing Now Moved To Text Messages

Discussion in 'BlackHat Lounge' started by shezboy, May 21, 2016.

  1. shezboy

    shezboy Jr. VIP Jr. VIP Premium Member

    Joined:
    Sep 17, 2008
    Messages:
    3,909
    Likes Received:
    5,439
    Gender:
    Male
    Location:
    UK
    Heads up and most likely if you're in the UK but this may be happening elsewhere already.

    I just received a text message from +44 7481 338120 claiming to be PayPal. The content of the message was:

    "Pay Pal - Your Account Access is Limtied. Please click on the link below to restore your access: (http://) oo-paypol.co.uk Pay Pal Team Id: AGFEEAAE"

    Notice how they still can't spell correctly. I guess when they said "limtied" they meant "limited".

    Has anyone else received a similar sms? Can anyone dig up on the domain at all? What I found was http://www.whois.com/whois/oo-paypol.co.uk

    Shez
     
    • Thanks Thanks x 4
  2. blogzandstuff

    blogzandstuff Elite Member

    Joined:
    Jan 1, 2015
    Messages:
    5,177
    Likes Received:
    2,394
    Occupation:
    blog creator
    Location:
    UK
    i ignore all texts that aren't from numbers in my address book, i never open texts from numbers not from known contacts
     
  3. Sugirl

    Sugirl Regular Member

    Joined:
    Jun 12, 2010
    Messages:
    464
    Likes Received:
    286
    I used to get these texts pretty much everyday when I was advertising something in uk...
     
  4. shezboy

    shezboy Jr. VIP Jr. VIP Premium Member

    Joined:
    Sep 17, 2008
    Messages:
    3,909
    Likes Received:
    5,439
    Gender:
    Male
    Location:
    UK
    Ah, from that I guess they are scrapping sites like Gumtree then for numbers. Makes sense in my case.

    Shez
     
  5. Neon

    Neon Jr. VIP Jr. VIP

    Joined:
    Nov 3, 2013
    Messages:
    2,707
    Likes Received:
    6,362
    Gender:
    Male
    Occupation:
    Traveling the world
    Location:
    Berlin
    Paypol monkey generator.
     
    • Thanks Thanks x 1
  6. Plus44

    Plus44 Power Member

    Joined:
    Dec 14, 2014
    Messages:
    644
    Likes Received:
    245
    Gender:
    Male
    Location:
    US
    I'm in the US and I've got it. I have been getting texts and calls every few days for months now from scammers claiming to be PP telling me that I owe money. I register their numbers as spam, but they always just call me back with a different number.
     
    • Thanks Thanks x 1
  7. shezboy

    shezboy Jr. VIP Jr. VIP Premium Member

    Joined:
    Sep 17, 2008
    Messages:
    3,909
    Likes Received:
    5,439
    Gender:
    Male
    Location:
    UK
    Well I just handed the hosting company all of the details to make them aware and the reply I got back was:

    For authentication purposes you need to send this complaint to [email protected].
    Sorry for the hassle but this is the protocol for complaints and fraud issues.

    So I just did the leg work for them and they basically said, "thanks for letting us know but you'll need to email our Australian company instead as they deal with that shit."

    I bid them good day and wished them well with continuing to host a phishing site that they know about. Twats!!

    Shez
     
  8. Skyebug77

    Skyebug77 Jr. VIP Jr. VIP

    Joined:
    Mar 22, 2012
    Messages:
    1,931
    Likes Received:
    1,354
    Occupation:
    Marketing
    Location:
    Portland,Or
    Ive seen this over in the US too.
     
    • Thanks Thanks x 1
  9. ChanzGrande

    ChanzGrande Elite Member

    Joined:
    Feb 16, 2008
    Messages:
    2,484
    Likes Received:
    1,172
    Occupation:
    Accountant
    Location:
    Northern Woods Counting Money
    Wow, good information for those of us who might be quick to hit the trigger finger when things seem like they could be wrong with our PP.

    Thanks Shez!
     
    • Thanks Thanks x 1
  10. Zwielicht

    Zwielicht Moderator Staff Member Moderator Jr. VIP

    Joined:
    Aug 31, 2013
    Messages:
    6,607
    Likes Received:
    11,747
    Gender:
    Male
    Occupation:
    Private Investigator
    Location:
    Riverside, California
    Home Page:
    I live in the United States, although I've never received a fraudulent PayPal text message.

    Do you have any ideas on how they're targeting and procuring phone numbers?
     
  11. shezboy

    shezboy Jr. VIP Jr. VIP Premium Member

    Joined:
    Sep 17, 2008
    Messages:
    3,909
    Likes Received:
    5,439
    Gender:
    Male
    Location:
    UK
    From what I can put together so far from the posts in this thread is that in the UK they scan/scrap/crawl classified ad sites like Gumtree for people who have posted a mobile contact number with their ad.

    I recently sold a couple of iPhones on there and I added my mobile number to the ad. I guess a simple scraper can do that although Gumtree hide some of the number initially and you have to click on a button that says "reveal rest of number" but, as I said, I assume a scraper tool can get around that.

    Shez
     
  12. Sristy

    Sristy Jr. VIP Jr. VIP Premium Member

    Joined:
    Aug 17, 2010
    Messages:
    1,799
    Likes Received:
    478
    Gender:
    Female
    Location:
    In My Blog Network
    Home Page:
    Lot of such calls and text we receive in our part of the world, rather we have got used to it
     
    • Thanks Thanks x 1
  13. Plus44

    Plus44 Power Member

    Joined:
    Dec 14, 2014
    Messages:
    644
    Likes Received:
    245
    Gender:
    Male
    Location:
    US
    Not pointing any fingers or anything like that, but I don't see how else I would get targeted by PP scammers outside of the stuff I do here on BHW. I have sent my personal phone number to a few members here before when they thought I was making fraudulent payments and whatnot. Every now and then I'll sign up for a new CPA network or buy a service in the marketplace that asks me for it. That's about it.

    It's always the same message every time though but with a different number. Text/call saying that my PP account balance is in the negatives. The people behind them even leave feedback on the numbers they use claiming it's legit.

    http://800notes.com/Phone.aspx/1-888-895-5705/3
    http://whocallsme.com/Phone-Number.aspx/8779812153
    http://800notes.com/Phone.aspx/1-877-981-2153
    http://whocallsme.com/Phone-Number.aspx/8153900088
     
  14. umerjutt00

    umerjutt00 Jr. VIP Jr. VIP

    Joined:
    Oct 28, 2011
    Messages:
    3,825
    Likes Received:
    2,063
    Occupation:
    Ninja
  15. SpawnOfDark

    SpawnOfDark Registered Member

    Joined:
    Mar 28, 2015
    Messages:
    94
    Likes Received:
    15
    Sad part it probably works on a lot of naive people out there, if sometihng like that happens though Paypal would refund the funds wouldnt they?
     
  16. Aluminium

    Aluminium Jr. VIP Jr. VIP Premium Member

    Joined:
    Dec 5, 2013
    Messages:
    1,744
    Likes Received:
    931
    Gender:
    Male
    Occupation:
    High-Quality Content Provider
    Location:
    Canada
    Home Page:
    Have you ever posted something expensive on Kijiji or Craiglist?

    I swear, every single time I post an electronic item, somebody tries to get me to "ship it to them".

    Foolish stuff - I understand that it's a legitimate risk, but you've gotta be pretty unaware in order to actually get PHISHED like that!

    In my opinion, at least.