Crooks In Action - Jenson Farrago Phishing

Alleged source: PayPal (2004/02/27)
Do_Not_Reply@paypal.com
Subject: IMPORTANT eayedwau

We regret to inform you that your account is about to be expired in next five business days. To avoid suspension of your account you have to reactivate it by providing us with your personal information.

To update your personal profile and continue using PayPal services you have to run the attached application to this email. Just run it and follow the instructions.

IMPORTANT! If you ignore this alert, your account will be suspended in next five business days and you will not be able to use PayPal anymore.

Report on the attachment from Norton Antivirus 2003:
Source: www.paypal.com.pif
Description: The email attachment www.paypal.com.pif is infected with the W32.Mimail.J@mm virus.

Security Measures We are currently performing regular maintenance of our security measures. Your account has been randomly selected for this maintenance, and you will now be taken through a series of identity verification pages. Protecting the security of your PayPal account is our primary concern, and we apologise for any inconvenience this may cause. Please fill in the correct information for the following category to verify your identity.
However, failure to update your records will result in account deletion.

Once you have updated your account records your PayPal will not be interrupted and will continue as normal.

If you cannot login with the first link provided you may try to turn off your pop-up blocker or you may follow the link below

PayPal
Dear PayPal Member,

Your account has been randomly flagged in our system as a part of our routine security measures. This is a must to ensure that only you have access and use of your PayPal account and to ensure a safe PayPal experience. We require all flagged accounts to verify their information on file with us. To verify your Information at this time, please visit our secure server webform by clicking the hyperlink below

Click here to verify your Information

Thank you for using PayPal!
The PayPal Team
Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your PayPal account and choose the "Help" link in the footer of any page.

To receive email notifications in plain text instead of HTML, update your preferences here.

PayPal Email ID PP478

Protect Your Account Info

Make sure you never provide your password to fraudulent websites.

To safely and securely access the PayPal website or your account, open up a new web browser (e.g. Internet Explorer or Netscape) and type in the PayPal URL (http://www.paypal.com/).

PayPal will never ask you to enter your password in an email.

For more information on protecting yourself from fraud, please review our Security Tips at http://www.paypal.com/securitytips

PayPal is committed to maintaining a safe environment for its community of buyers and sellers. To protect the security of your account, PayPal employs some of the most advanced security systems in the world and our anti-fraud teams regularly screen the PayPal system for unusual activity.

Recently, our Account Review Team identified some unusual activity in your account. In accordance with PayPal's User Agreement and to ensure that your account has not been compromised, access to your account was flagged. Your account will remain flagged until this issue has been resolved. This is a fraud prevention measure meant to ensure that your account is not compromised.

In order to secure your account and quickly restore full access, we may require some specific information from you for the following reason:

Case ID Number: PP-056-245-481
We encourage you to log in and restore full access as soon as possible.
Should your account remain flagged for an extended period of time, it may result in further limitations on the use of your account or may result in eventual account closure.

-----------------------------------------------------------------------
Please click on the link below to log in
and restore full access to your account.
http://server1.hostea.com/~estrella/.paypalUPDATE/index.html
----------------------------------------------------------------------

Thank you for your prompt attention to this matter. Please understand that this is a security measure meant to help protect you and your account. We apologize for any inconvenience.

http://www.paypal.com/cgi-bin/webscr?cmd=3D_home"> http://images.paypal.com/en_US/i/logo/email_logo.gif" border=3D= 0 width=3D"255" height=3D"35">

Dear valued "FONT-SIZE: 10pt; COLOR: black; FONT-FAMILY: Verdana">PayPal^=AE=
member:

ack; FONT-FAMILY: Verdana">PayPal=AE ONT>
is committed to maintaining a safe environment for its community of

is a fraud prevention measure meant to ensure that your account is not
>
compromised.

In order to secure your account and quickly restore full access, we may r>
require some specific information from you for the following reason:

We encourage you to log in and restore full access as soon as possible. r>
Should access to your account remain limited for an extended period of
>
time, it may result in further limitations on the use of your account. nt> =
&n=
bsp; &nbs=
p;

However, failure to restore your records will result in account suspens=
ion.
Please update your records on or before r=3Dred>May
4, 2005.

Once you have updated your account r=
ecords, your Y: Verdana">PayPal sess=
ion will not be
interrupted and will continue as normal.

To update your
Paypal records click on the following link:
ttp://61.8.248.242/paypal/" target=3D_self>https://www.paypal.com/cgi-bin/=
webscr?cmd=3D_login-run

PayPa^l=AE<=
/SUP>
Account Review Department

PayPal Email ID PP522

=3D2> &nb=
sp; =
;

Accounts Management As outlined in our User Agreement, ONT-SIZE: 10pt; COLOR: black; FONT-FAMILY: Verdana">
PayPal will
pe=
riodically send you information about site changes and enhancements.

Visit our Privacy Policy and User Agreement if you have any questions.&=
nbsp;
http://www.paypal.com/cgi-bin/webscr?cmd=3Dp/gen/ua/po=
licy_privacy-outside">http://www.paypal.com/cgi-bin/webscr?cmd=3Dp/gen/ua/=
policy_privacy-outside

----3338749949382827095--

After fraud complaints from the PayPal members, the PayPal Inc. had developed a security program against the fraudulend attempts of accounts thefts. For that we have to securise all the members informations by updating and checking the registrated informations. Please go to https://www.paypal.com/cgi-bin/webscr?cmd=_login-run , login and update your information by completing the form from the forwarded link so we can check your account validity and your identity and reactivate them :

As outlined in our User Agreement, PayPal will periodically send you information about site changes and enhancements. Visit our Privacy Policy and User Agreement if you have any questions.

Per the User Agreement, Section 9, we may immediately issue a warning, temporarily suspend, indefinitely suspend or terminate your membership and refuse to provide our services to you if we believe that your actions may cause financial loss or legal liability for you, our users or us. We may also take these actions if we are unable to verify or authenticate any information you provide to us.

As outlined in our User Agreement, PayPal will periodically send you information about site changes and enhancements. Visit our Privacy Policy and User Agreement if you have any questions.

Copyright © 2005 PayPal Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective owners.

Due to recent fraudulent transactions, we have issued the following security requirements.

It has come to our attion that 95% of all fraudulent transactions are caused by members using stolen credit cards to purchase or sell non existant items. Thus we require our members to add a Debit/Check card to their billing records as part of our continuing commitment to protect your account and to reduce the instance of fraud on our website. Your Debit/Check card will only be used to identify you. If you could please take 5-10 minutes out of your online experience and renew your records you will not run into any future problems with the PayPal® service. However, failure to confirm your records will result in your account suspension.

Once you have updated your account records your pending PayPal® account transactions will not be interrupted and will continue as normal.

To update your billing records please login to your account by clicking here.

--------------------------------------------------------------------------------
Copyright © 1995-2005 PayPal Inc. All Rights Reserved. Designated trademarks and brands are the property of their respective owners. Use of this Web site constitutes acceptance of the PayPal User Agreement and Privacy Policy.

At PayPal, we want to increase your security and comfort level with every transaction. From our Buyer and Seller Protection Policies to our Verification and Reputation systems, we'll help to keep you safe.

We recently noticed an attempt to log in to your PayPal account from a foreign IP address and we have reason to belive that your account was used by a third party without your authorization.

If you recently accessed your account while traveling, the unusual log in attempts may have been initiated by you. Therefore, if you are the rightful account holder, click on the link below to log into your account and follow the instructions.

If you choose to ignore our request, you leave us no choice but to temporarily suspend your account.

If you received this notice and you are not the authorized account holder, please be aware that it is in violation of PayPal policy to represent oneself as another PayPal user. Such action may also be in violation of local, national, and/or international law. PayPal is committed to assist law enforcement with any inquires related to attempts to misappropriate personal information with the intent to commit fraud or theft. Information will be provided at the request of law enforcement agencies to ensure that impersonators are prosecuted to the fullest extent of the law.

Dear member
Our systems detected your user ID being used in Europe. At the moment we are trying to trace and resolve the provenience of this matter, so please get involved in helping us trace these bruteforcing attempts. Use the link below to access our mainframe database and confirm the information we have on file for your account.

If you choose to ignore our request, you leave us no choice but to temporarily suspend your account.

If you received this notice and you are not the authorized account holder, please be aware that it is in violation of PayPal policy to represent oneself as another member.
PayPal is committed in assisting law enforcement with any inquires related to attempts to misappropriate personal information with the intent to commit fraud or theft.
Information will be provided at the request of law enforcement agencies to ensure that impersonators are prosecuted to the fullest extent of the law..

It has come to our attention that your PayPal Profile Verification records are out of date. This requires that you update your Profile Verification Records immidiatley.

Failure to update your records will result in account termination. Please update your records within 24 hours. Once you have updated your account records, your PayPal account will not be terminated and will continue as normal. Failure to update will result in cancellation of service, Terms of Service (TOS) violations or future billing problems.

Security Center Advisory!

We recently noticed one or more attempts to log in to your PayPal account from a foreign IP address and we have reasons to belive that your account was hijacked by a third party without your authorization. If you recently accessed your account while traveling, the unusual log in attempts may have been initiated by you.

If you are the rightful holder of the account you must click the link below and then complete all steps from the following page as we try to verify your identity.

Click here to verify your account

If you choose to ignore our request, you leave us no choise but to temporaly suspend your account.

Thank you for using PayPal!

PayPal Email ID PP697

An billing address is confirmed if the buyer?s credit card billing address matches his or her shipping address. In some instances, PayPal can also confirm an billing address by examining the buyer?s PayPal account history.

The Purpose of a Confirmed Billing Address
Although the vast majority of unconfirmed billing addresses are not fraudulent, PayPal offers confirmed billing addresses as an additional layer of fraud protection. Confirmed billing addresses help guard against stolen credit cards and identity theft and decrease your chances of receiving a chargeback. However, it is important to note that you can still receive a chargeback for reasons unrelated to fraud.

Shipping to an Unconfirmed Billing Address
Most unconfirmed billing addresses are not fraudulent and sellers don?t usually experience problems shipping to them. When you do ship to an unconfirmed billing address, PayPal encourages you to be alert to your buyer and minimize risk by following our Protection Tips for Sellers.

How a Buyer Can Confirm an Billing Address
Inform your buyer on how to confirm his or her billing address, by communicating the following options:

   1. Add a credit card to your PayPal account. PayPal will confirm the credit card billing address (i.e., the address where you receive your credit card statement).
   2. Apply for PayPal Buyer Credit. If you?re approved, the address on your application will be a Confirmed Billing Address.
   3. Alternate billing address confirmation.
This process takes several days and is only available for U.S. accounts. Confirm Or Decline the Billing Address. Click
Alternate Billing Address Confirmation page.

Notification from PayPal

Dear PayPal Member!

We inform you that your information is managed and viewed by our specialists of security department during all time of your activity on your personal account with PayPal. According to our verifications, there was a mistake in your personal data entered when card being registered as the payment method, and now your card can't be charged for your payments. Your identification data is stored in safe place. An information about account of seller can be found by means of using your credit or debit card with active validity and an account informaton should be verificated too. In case of automatic payments, credit or debit card is normally charged in 5-7 days after receiving of the invoice. Please also be kindly noted, that your necessary information must be confirmed as well.

Click here to proceed to confirmation page

   Due to recent fraudulent activities on some of PayPal online
   accounts we are launching a new security system to make
   PayPal online accounts more secure and safe. Before we can
   activate it we will be checking all PayPal online accounts to confirm
   the authenticity of the holder.

We will require a confirmation that your account has not been
stolen or hacked. Your account has not been suspended or frozen.

   To confirm your account status please Login

      -complete the required information to authenticate and reset your account

      -make sure your account balance has not been changed

      -make sure your details have not been changed

      -review recent transactions in your account history for any unauthorized
      transfer

   If you find any type of suspicious activities please contact us immediately.
   Please include in your message your account number, your account name
   and the unauthorized transfer date & time.

Please do not reply to this message. For any inquiries, contact Customer Service.

Alleged source: PayPal (2007/01/03)
service@paypal.com
Subject: Confirm this Transaction!

Dear member,

This email confirms that you have paid orders@dell.com $699.99 USD using PayPal.

This credit card transaction will appear on your bill as "PAYPAL *DELL INC".

Payment Details
Purchased From:Dell.Inc

Item #
Item Title
Quantity
Price
Subtotal
250016390196
New Dell 6400 e1505 Intel Core Duo 1.66GHz 1GB Laptop
1

$669.95 USD

$669.95 USD

Shipping & Handling via USPS First Class Mail to 154XX
(includes any seller handling fees)

$19.16 USD

Shipping Insurance (optional):
--
Sales Tax (6.000% inPA) :

$10.88 USD

Total:

$699.99 USD

Note:Thank you!

Shipping Information
Shipping Info:

Wayne E Bakewell
16 elm st
Brownsville, PA 15417
United States
Address Status:
Confirmed
If you have questions about the shipping and tracking of your purchased item or service, please contact the seller orders@dell.com.

Do you confirm this transaction?
If this transaction was not made by you please immediately take the following steps:

Login to your account by clicking on the link below

Provide requested information to ensure you are the owner of the account

Find this transaction in HISTORY and click 'Cancel Transaction'

CANCEL TRANSACTION!

Thank you for using PayPal!
The PayPal Team

Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and choose the Help link located in the top right corner of any PayPal page.

PayPal Email ID PP843