4 ms·

That tracks. Recently got a scammy invoice _from their mail servers_. Sort of thing that works really well on boomers - looks like they've had an unreported bre

That tracks. Recently got a scammy invoice _from their mail servers_. Sort of thing that works really well on boomers - looks like they've had an unreported breakin. Layoffs cover that news nicely.

rco8786 4y ago
Zero reason to think these things are related.
ceejayoz 4y ago
That's not a breakin. Any PayPal user can send an invoice to an email address. It's just the online version of sending a fake invoice to a company's accounts receivable department in hopes they pay it. https://www.paypal.com/us/business/accept-payments/invoice https://www.paypal.com/us/business/accept-payments/invoice or https://www.paypal.com/us/digital-wallet/send-receive-money/request-money https://www.paypal.com/us/digital-wallet/send-receive-money/... Currently in my inbox: > JEFFREY BRIAN GLICK sent you a money request > Amount requested: $500.00 USD > Note from JEFFREY BRIAN GLICK: We found suspicious activity on your account. If you did not make this transaction, call us at 18887272074 to cancel and claim a refund. Obvious scam, but folks fall for it.
- jjeaff 4y ago
  They do have a security issue, because people are sending the invoices from "PayPal Inc.". They have some basic filters in place to disallow you from entering PayPal Inc. exactly, but scammers get around it by using similar looking characters. Like a capital I instead of lowercase l.
  - ceejayoz 4y ago
    Still not a break-in. Forward it to phishing@paypal.com. One of the more responsive abuse addresses I've come across; only AWS's has beat it thus far.
    - jjeaff 4y ago
      I didn't say break-in, just "security issue". And I would be interested in how responsive their phishing address would be to a case like this simply because the email is actually from paypal, as was said before, it's just misleading because it looks like Paypal itself is requesting payment. Definitely meets the definition of phishing, but not the most common type of phishing.

That tracks. Recently got a scammy invoice _from their mail servers_. Sort of thing that works really well on boomers - looks like they've had an unreported breakin. Layoffs cover that news nicely.

rco8786 4y ago

Zero reason to think these things are related.

ceejayoz 4y ago

That's not a breakin. Any PayPal user can send an invoice to an email address. It's just the online version of sending a fake invoice to a company's accounts receivable department in hopes they pay it. https://www.paypal.com/us/business/accept-payments/invoice https://www.paypal.com/us/business/accept-payments/invoice or https://www.paypal.com/us/digital-wallet/send-receive-money/request-money https://www.paypal.com/us/digital-wallet/send-receive-money/... Currently in my inbox: > JEFFREY BRIAN GLICK sent you a money request > Amount requested: $500.00 USD > Note from JEFFREY BRIAN GLICK: We found suspicious activity on your account. If you did not make this transaction, call us at 18887272074 to cancel and claim a refund. Obvious scam, but folks fall for it.

jjeaff 4y ago
They do have a security issue, because people are sending the invoices from "PayPal Inc.". They have some basic filters in place to disallow you from entering PayPal Inc. exactly, but scammers get around it by using similar looking characters. Like a capital I instead of lowercase l.
- ceejayoz 4y ago
  Still not a break-in. Forward it to phishing@paypal.com. One of the more responsive abuse addresses I've come across; only AWS's has beat it thus far.
  - jjeaff 4y ago
    I didn't say break-in, just "security issue". And I would be interested in how responsive their phishing address would be to a case like this simply because the email is actually from paypal, as was said before, it's just misleading because it looks like Paypal itself is requesting payment. Definitely meets the definition of phishing, but not the most common type of phishing.