Anyone heard of vitalwerks?

[luv]

Originally Posted by ClevelandBronco

It's not PayPal. It's a scam.

Check this: http://www.siteadvisor.com/sites/ser...tid/?p=2503465

A phishing scam that spoofs the PayPal site has recently been active at

http://secure-pay-pall.servehttp.com...cmd=_login-run

Thanks to phishtank.com and its contributors for catching this. The scam site currently traces to IP 69.65.19.125 in the USA, hosted by GigeNET.com with DNS services provided by no-ip.com and domain registration through " VITALWERKS INTERNET SOLUTIONS LLC DBA NO-IP" (no-ip.com).

Posted at 12/02/2009-10:38:10 PM by NotBuyingIt, Reviewer , View profile [ Reputation score: 9 / 9 ]

I know I'm gonna regret saying this, but can someone dumb that up for me? How does it happen? Did she buy something online, and this got her information?

[Bugeater]

Originally Posted by luv

I know I'm gonna regret saying this, but can someone dumb that up for me? How does it happen? Did she buy something online, and this got her information?

If it's any consolation, that didn't make a lick of sense to me either.

[ClevelandBronco]

Originally Posted by luv

I know I'm gonna regret saying this, but can someone dumb that up for me? How does it happen? Did she buy something online, and this got her information?

I'll let wikipedia do it:

"In the field of computer security, phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication. Communications purporting to be from popular social web sites, auction sites, online payment processors or IT administrators are commonly used to lure the unsuspecting public. Phishing is typically carried out by e-mail or instant messaging,[1] and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one. Even when using server authentication, it may require tremendous skill to detect that the website is fake. Phishing is an example of social engineering techniques used to fool users,[2] and exploits the poor usability of current web security technologies.[3] Attempts to deal with the growing number of reported phishing incidents include legislation, user training, public awareness, and technical security measures."

[Bugeater]

Originally Posted by ClevelandBronco

I'll let wikipedia do it:

"In the field of computer security, phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication. Communications purporting to be from popular social web sites, auction sites, online payment processors or IT administrators are commonly used to lure the unsuspecting public. Phishing is typically carried out by e-mail or instant messaging,[1] and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one. Even when using server authentication, it may require tremendous skill to detect that the website is fake. Phishing is an example of social engineering techniques used to fool users,[2] and exploits the poor usability of current web security technologies.[3] Attempts to deal with the growing number of reported phishing incidents include legislation, user training, public awareness, and technical security measures."

I understand what phishing is, but the person in question has never used PayPal to begin with.

[Old Dog]

Originally Posted by Bugeater

I understand what phishing is, but the person in question has never used PayPal to begin with.

Possibly they got her banking info via pfishing and then opened a paypal account using it.

[Bugeater]

Originally Posted by truebigdog

Possibly they got her banking info via pfishing and then opened a paypal account using it.

OK, so they spoofed her bank's website then, not PayPal's.

[ClevelandBronco]

Originally Posted by luv

I know I'm gonna regret saying this, but can someone dumb that up for me? How does it happen? Did she buy something online, and this got her information?

All they needed was to send out an e-mail to her address (or millions of random addresses hoping that some of them were real). If she replies in any way at all, she's doing their spy work for them.

Even answering with the equivalent of "Bugger off. I'm not falling for it," lets the phishermen know that they've hit a legit e-mail address.

[luv]

Originally Posted by ClevelandBronco

All they needed was to send out an e-mail to her address (or millions of random addresses hoping that some of them were real). If she replies in any way at all, she's doing their spy work for them.

Even answering with the equivalent of "Bugger off. I'm not falling for it," lets the phishermen know that they've hit a legit e-mail address.

Gotcha. I can see her replying to something, as she forwards me stuff all the time that I delete without even opening. I'll have to give her the lecture on not opening items or responding to IM's from people she doesn't know.