11/10/2005 - 14:26
ASOCIACIÓN DE INTERNAUTAS

El phishing bancario se esta reduciendo esta semana, pero crece el de empresas donde son necesarios datos bancarios, tenemos el ejemplo de Ebay, esto también le ocurre a PayPal (empresa en Internet que permite la transferencia de dinero entre usuarios usando el email como dato de cliente). El objetivo de este tipo de phishing es intentar robar los datos bancarios de una posible victima.

El método usado es el clásico, la recepción de un correo electrónico;

************** INICIO ***************

From: PayPal INC.
To: xxxx@xxx.xxx
Sent: Sunday, October 09, 2005 1:49 PM
Subject: Notification of Limited Account Access (Routing
Code:C840-L001-Q190-T1812)


Dear PayPal Member,

PayPal is committed to maintaining a safe environment for its community of buyers and sellers. To protect the security of your account, PayPal employs some of the most advanced security systems in the world and our anti-fraud teams regularly screen the PayPal system for unusual activity.

Recently, our Account Review Team identified some unusual activity in your account. In accordance with PayPal's User Agreement and to ensure that your account has not been compromised, access to your account was flagged. Your account will remain flagged until this issue has been resolved. This is a fraud prevention measure meant to ensure that your account is not compromised.

In order to secure your account and quickly restore full access, we may require some specific information from you for the following reason:

Our system requires further account verification.

Case ID Number: PP-056-245-481 We encourage you to log in and restore full access as soon as possible. Should your account remain flagged for an extended period of time, it may result in further limitations on the use of your account or may result in eventual account closure.

-------------------------------------------------------------
Please click on the link below to log in and restore full access to your account.

Click here to activate your account

-------------------------------------------------------------
Thank you for your prompt attention to this matter. Please understand
that this is a security measure meant to help protect you and your
account. We apologize for any inconvenience.

Sincerely,
PayPal Account Review Department
PayPal Email ID PP562

************** FINAL ***************

En el correo nos sugiere que verifiquemos nuestra cuenta de usuario de PayPal, presionando sobre el link que viene en el correo electrónico, este link nos enví­a a una web falsa que emula ser la empresa PayPal. El método usado no es nuevo, pero los cibercacos en esta web falsa usan una nueva variante, emular otra ventana de dirección del navegador donde contiene la url verdadera de la empresa PayPal, de esta manera los cibercacos hace creer a la posible victima que estan en la web original.


Las web falsas son las siguientes;

http://210.178.147.130/images/paypal/sysdll.php

http://210.178.147.130/images/paypal/login.html

http://210.178.147.130/images/paypal/protect.php

http://210.178.147.130/images/paypal/update.php

http://juvenia-swiss.com/images/update.html