1. PayPal Phishing Example

2. Can you tell which is real? 1. 2.

3. Both appear to be from service@paypal.com 1. 2.

4. Both have the same logo

5. Both want you to verify your account. 1. 2.

6. Both want to thank you. 1. 2.

7. Both tell you not to reply, and have a log in link. 1. 2.

8. Both tell you how to update your preferences... 1. 2.

9. ...and both have an official Email ID. 1. 2.

10. Did you guess which one is real? 1.2.

11. Lets take a closer look... 1.

12. ...message 2... 2.

13. More of message 1... 1.

14. More of message 2... 2.

15. Now do you know which is real? 1. 2.

16. Lets look at the links. Right-click on the message. Select View Source The source code will open in Notepad. Edit -> Find Search for http Message 1 SourceMessage 1 Source Message 2 SourceMessage 2 Source

17. Link Examples The URL may or may not have quotes around it. It may have other code between <a and http. It may be https instead of just http. It may be a link to an image instead of a page.

18. If you are using web based e-mail... You may see something like href=/exchweb/bin/redir.asp? before the actual URL. Just ignore that part and look for whats after http. Source code for web-based email will have added code.

19. Results for Message 1 http://211.202.2.79/~funkeyboy/.../.www. paypal.com/www.paypal.com/cgi- bin/webscrcmd_login.php (Obviously not the PayPal site.) https://www.paypal.com/row/PREFS- NOTI (Actually DOES go to the PayPal site.)

20. Results for Message 2 https://www.paypal.com/us https://www.paypal.com/us/securitytips https://www.paypal.com/us/VERIFY https://www.paypal.com/us/cgi- bin/webscr?cmd=_login-run https://www.paypal.com/us/PREFS- NOTI

21. Message 1 is Fake. Click for close up.

22. Message 2 is Real. Click for close up.

23. Things to remember... Never click on a link in a suspicious email. Instead, type the link into your browser manually.

24. Other observations... Now you know why spam filters may have a hard time figuring out if a message is spam or not. Many fake messages look just like real messages.

25. Thank you for listening!