NUEVO MAIL MALICIOSO CON FALSO REMITENTE PAYPAL

Está llegando hoy un nuevo mail que ofrece enlace malicioso a https://lantai-kayu. net/wp-content/plugins/wp-config/, y cuyo texto reza así:

TEXTO DEL MAIL

______________

Asunto: [Support_PayPal] important – Your account has been Limited !!
De: [PayPal] <info090282628262@votresite.ca>
Fecha: 13/06/2019 20:26
Para: “DESTINATARIO”

 

Your PayPal account has been limited.
Dear Customer,.

– We need your help resolving an issue with your account. To give us time to work together on this, we’ve temporarily limited what you can do with your account until the issue is resolved.

– We understand it may be frustrating not to have full access to your PayPal account. We want to work with you to get your account back to normal as quickly as possible.

What’s the problem ?

– We need a little bit more information about you to help confirm your identity..

Verify My Account —> Enlace malicioso a https://lantai-kayu. net/wp-content/plugins/wp-config/

How you can help ?

It’s usually pretty easy to take care of things like this. Most of the time, we just need a little more information about your account or latest transactions.
To help us with this and to find out what you can and can’t do with your account until the issue is resolved, log in to your account and go to the Resolution Center.

Yours sincerely,
PayPal

Help | Security Centre

Please do not reply to this email. To get in touch with us, click Help & Contact .

Copyright 1999 – 2019 PayPal. All rights reserved.

Consumer advisory – PayPal Pte. Ltd. the holder of PayPal’s stored value facility, does not require the approval of the Monetary Authority of Singapore. Users are advised to read the terms and conditions carefully.

PayPal PPX6985:94d2eb006f24e

____________

EL enlace malicioso en cuestión ya es interceptado por los principales antivirus, como Kaspersky y McAfee:

………..

KASPERSKY:

Amenaza de pérdida de datos

Según los datos de reputación de Kaspersky VirusDesk, el enlace https://lantai-kayu. net/wp-content/plugins/… puede llevarle a una página web falsificada para obtener acceso a sus datos personales, por lo que no se recomienda visitarla.

………..

MCAFEE:

 

………….

La página de phishing está bloqueada.
https://lantai-kayu.net/wp-content/plugins/wp-config/

Powered By: McAfee Endpoint Security
McAfee Logo

………..

De todas formas se avisa en general del riesgo que representa pulsar en dicho enlace, o en cualquiera que contenga un mail no solicitado (como tambien en sus ficheros o imagenes), a pesar de que el aparente remitente sea conocido, como en este caso Paypal.

Si se entra en la web de dicho enlace, se visualiza una pagina de captura de datos, QUE NUNCA SE DEBEN ENVIAR !!!

Esperando que lo indicado les será de utilidad, reciban saludos

ms, 14-6-2019