Conversation

Notices

1. Embed this notice
   Jason Evangelho 🌊🏕️ (killyourfm@layer8.space)'s status on Saturday, 16-Aug-2025 01:14:40 JST Jason Evangelho 🌊🏕️

   There's a really disturbing #Paypal #phishing scam happening right now. Obviously this reads like a typical phishing attempt (bad grammar, a malformed phone number to call, etc), but the official Paypal email wasn't spoofed. It came from PayPal's email infrastructure.

   Examining the headers shows that SPF, DKIM, and DMARC all pass. If you have a Paypal account, please exercise caution. Don't click links in these emails. Forward them to phishing@paypal.com.

   Please boost for visibility.

   • Embed this notice
     Jason Evangelho 🌊🏕️ (killyourfm@layer8.space)'s status on Saturday, 16-Aug-2025 01:18:38 JST Jason Evangelho 🌊🏕️

     in reply to

     • Dr. Dek 👨‍🚀🐧🚀 )

     @portaloffreedom Fascinating. Thanks for the insight.

   • Embed this notice
     Dr. Dek 👨‍🚀🐧🚀 ) (portaloffreedom@social.linux.pizza)'s status on Saturday, 16-Aug-2025 01:18:39 JST Dr. Dek 👨‍🚀🐧🚀 )

     in reply to

     @killyourfm "ready to get coding at the bottom" at the bottom is extremely interesting.

     They are probably exploiting some invite developer system. The same way scammers were using Google calendar invites and google drive file share to send spam and scam messages.

     And that's why it would come from a paypal official mail server.

   • Embed this notice
     Jason Evangelho 🌊🏕️ (killyourfm@layer8.space)'s status on Saturday, 16-Aug-2025 01:27:38 JST Jason Evangelho 🌊🏕️

     in reply to

     • Raptor :gamedev:

     @raptor85 HA! I just noticed that. Rather hilarious that they're targeting people who should absolutely recognize this as a scam. But it looks just authentic enough to scare the crap out of people like... well, anyone in my family.

   • Embed this notice
     Raptor :gamedev: (raptor85@mastodon.gamedev.place)'s status on Saturday, 16-Aug-2025 01:27:39 JST Raptor :gamedev:

     in reply to

     @killyourfm looks like what they did was send an invite with that entire message being their "name", i wonder if the broken phone number formatting is just a trivial way to get around detection of phone numbers in a name.

   • Embed this notice
     Jason Evangelho 🌊🏕️ (killyourfm@layer8.space)'s status on Saturday, 16-Aug-2025 01:31:31 JST Jason Evangelho 🌊🏕️

     in reply to

     • Martin Giger

     @freaktechnik HAHA, I just picked up on that.

   • Embed this notice
     Martin Giger (freaktechnik@chaos.social)'s status on Saturday, 16-Aug-2025 01:31:33 JST Martin Giger

     in reply to

     @killyourfm that's quite the user/company name they picked.

   • Embed this notice
     Jason Evangelho 🌊🏕️ (killyourfm@layer8.space)'s status on Saturday, 16-Aug-2025 01:33:16 JST Jason Evangelho 🌊🏕️

     in reply to

     Thanks for the insights, everybody!
     Wanted to share this because it looks JUST authentic enough to trick some people (e.g. my aunt or grandmother) into calling that number and giving out personal info.