You have been warned— this is what you need to watch out for.
A new warning for PayPal users follows recent alerts for Amazon and Facebook users, as new attacks target account holders with messages masking malicious sign-ins. These messages appear to come directly from PayPal, and users need to beware.
Per MalwareBytes, this “highly sophisticated email scam is targeting PayPal users with the subject line of ‘Set up your account profile’.” Beware, because “it’s hard for the everyday user to tell if the email has been spoofed or not.”
Spoofing works by replacing a real “from” address with something the sender picks instead — in this case a PayPal email address. One of the reasons email is so vulnerable to attack is that simple tricks like this work — it’s an open architecture.
