4 ms·
Huh? How is receiving a phishing email an evidence of compromise?
by jwilk 9y ago
Huh? How is receiving a phishing email an evidence of compromise?
- monochromatic 9y agoForwarding it to Paypal and getting a response that it's legit is certainly interesting.
- avip 9y agoFor the record, not overly happy with the response, I've sent this follow-up to spoof@paypal.com: >Hi there. Thanks for the quick response. I do have a question. Why would PayPal refer me to a form not hosted under PayPal domain? How can I tell it's a legit PayPal communication? Expectedly, never got a response.
- brazzledazzle 9y agoWould it be possible for you to post the source (or even just the headers) with your email scrubbed from the message you received from them the first time? Depending on your email provider they could fake that too but it might be worth a look.
- brazzledazzle 9y agoIt seems very unlikely that PayPal's spoof email would validate an obviously spoofed domain. It could be that PayPal is completely phoning it in at this point but that's really egregious. Not that I think they're some amazing company, I'd even say they're downright evil based on past experiences.