PayPal users are cautioned that there is another security vulnerability that has been discovered with the PayPal system.
This phishing technique actually uses a valid PayPal URL and even provides a valid security certificate, but uses an injection technique to override PayPal’s page and redirect to a 3rd-party site. Due to the browser having valid URLs, many could easily be fooled into supplying the 3rd-party site with PayPal credentials, of course leaving them open to being ripped off.
Source: TechSpot
Articles RSS