Heads up: Mimail-I
Results 1 to 5 of 5

Thread: Heads up: Mimail-I

  1. #1
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,403

    Heads up: Mimail-I

    There's a new variant of MiMail. It comes disguised as an email from Paypal. When you run the attachment you are presented with a form that asks for your creditcard details.

    The body contains the following message:
    Dear PayPal member,

    PayPal would like to inform you about some important information regarding your PayPal account. This account, which is associated with this email address will be expiring within five business days. We apologize for any inconvenience that this may cause, but this is occurring because all of our customers are required to update their account settings with their personal information.

    We are taking these actions because we are implementing a new security policy on our website to insure everyone's absolute privacy. To avoid any interruption in PayPal services then you will need to run the application that we have sent with this email (see attachment) and follow the instructions. Please do not send your personal information through email, as it will not be as secure.

    IMPORTANT! If you do not update your information with our secure application within the next five business days then we will be forced to deactivate your account and you will not be able to use your PayPal account any longer. It is strongly recommended that you take a few minutes out of your busy day and complete this now.

    DO NOT REPLY TO THIS MESSAGE VIA EMAIL! This mail is sent by an automated message system and the reply will not be received.

    Thank you for using PayPal.
    Unfortunatly the 4304 DAT file (needed to detect it) for McAfee isn't available for download yet.

    http://vil.nai.com/vil/content/v_100822.htm
    Oliver's Law:
    Experience is something you don't get until just after you need it.

  2. #2
    Senior Member
    Join Date
    Jan 2003
    Posts
    1,499
    MS Mitts and I were hit with this recently with another variant.

    The site which it connects to in order to gather your details has been downed.

    Cheers for the heads up sirdice.

  3. #3
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,403
    Mark: Just out of curiosity, was it that citybank scam? http://www.securityfocus.com/infocus/1745

    BTW McAfee updated their website late friday afternoon. So the 4304 DAT should be available now.
    Oliver's Law:
    Experience is something you don't get until just after you need it.

  4. #4
    Senior Member
    Join Date
    Jan 2003
    Posts
    1,499
    Nope,

    I'm sure it was Paypal and 2 others.

  5. #5
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,403
    Originally posted here by mark_boyle2002
    Nope,

    I'm sure it was Paypal and 2 others.
    Odd. Maybe it's the same thing but now it comes with a virus included to cover more ground?
    Oliver's Law:
    Experience is something you don't get until just after you need it.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides