PayPal phishing scam

 ​Tech tip
 
I’m writing today about an email I got recently. It’s such a great example of a phishing scheme, and they are becoming so prevalent these days. In phishing, there is no initial malware placed into your computer, there’s no virus, nothing but an email. Any computer is susceptible, because it’s not based on malicious software, it’s really based on malicious intent. In the case of my email, it gave me a link to sign onto my Paypal account to “Correct” my information. It said that money was being withheld due to this problem.
​
Now, I do actually have a Paypal account. And I can certainly see why it might seem legitimate. These emails might pretend to come from the IRS, UPS, Amazon, anything common enough so that you would likely be a customer. Someday, these folks might actually learn to spell, and then it will be harder to discern. Meantime, here’s what they sent me:

Here’s the hyperlink they sent behind that login: https://omgclub.co.uk/renew/awur/eye/index.xyz... (link is inactive, do not follow)
 
First, let’s look at the From address: alerts.noreply-dmsmm.sp@notifymsp.paypal.xyx 
You can see it’s NOT from paypal, but from notifymsp. That’s a clue this is fake. Next, it has a link; that Paypal icon they give shows a hyperlink, as I give above, to omgclub.co.uk.  That’s clearly fake, and it’s coming from the UK no less.
 
Now, if you read the whole thing, starting from the subject line, there are SEVERAL errors and misspellings. I highlighted most of them in red. The grammar is bad, the spelling mistakes are too numerous, and the wording is just silly for a big corporation like PayPal. I especially liked the security TREATS. And why is it addressed to Paypal and signed from Paypal? I just don’t get it. This one was really just too funny.
 
Someday these emails will look perfect, but for now, pay attention and DO NOT CLICK on an embedded link in your email unless you are absolutely sure who it’s from and that it is legitimate.
 
Let me point out that while Carol and I are both using Windstream email, I did receive this email, but I was not able to forward it to Carol a week later. Sometime in there, Windstream started blocking it.