Hackers have hit the ground running in 2021

Hackers and scammers launched an extensive new phishing campaign that targets the legions of PayPal users around the world. The campaign is being run on both text message and email channels and if you're a PayPal user, you may have already seen it. If you haven't, in the days and weeks ahead, you'll probably get a text or an email to the effect that the company has detected suspicious activity on your account.

It will say the company has taken the step of "limiting" your account, which puts restrictions on withdrawing, sending or receiving money. Whether you get the text or email variant of the communication, the scammers will "helpfully" include a link, and ask you to verify your account information in order to remove these restrictions.

Scammers will try to get you to use your password

Naturally, this isn't a legitimate PayPal communication and if you tap or click on the link, you'll be sent to a spoof page that looks like it contains a PayPal login box. Unfortunately, if you attempt to log in, all you'll be doing is handing your login credentials over to the scammers, giving them unfettered access to your account. If you maintain a balance in your PayPal account, it will be promptly drained. If you have bank accounts or credit cards linked to your account, you can expect them to be abused.

This isn't a new idea or a new type of campaign, but it is one of the first coordinated efforts we've seen in 2021 and as such, it pays to be aware of it.

My perspective

If you get a communication regarding your PayPal account and you even suspect that it might be true, rather than relying on the link supplied in the text or email, open a new tab and navigate to PayPal's login page manually. That's the easiest way to avoid this type of scam.

 

You might hear echoes of Jerry Maguire - "Show me the money"

 


By Denis Wilson

Cybersecurity Expert, Small Business Technology Consultant, Managed Services Provider, Managed IT Support

Thanks for reading this short post. For more tips on thriving with small business technology, check out the other blog posts at DWPIA Blogs. You can also find me on LinkedIn, Facebook, and Twitter. 

I am also a published author and speaker on cloud computing, work@home, and cybersecurity. I work extensively with business and professional associations to provide small business technology education programs.

 

Contact me if you would like me to speak to your association