Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

PayPal Phishing Site Exploits Google XSS Vulnerability

by Marianna Schmudlach Jan 12, 2006 2:40PM PST

There is a new PayPal phishing site that is crafty and cunning in attempting to hide its true address from the surfer. Unsuspecting users might fall for this devious trickery. Unfortunately, Google is vulnerable to a XSS attack to which they are aware and are working to resolve. It is this XSS attack that the phishing site uses to begin its lure and deception of the surfer.

A 1024x768 flash film of the whole visitation is available in the extended entry of this blog item. It shows the whole email delivery, thru the Google exploit, and the execution of the scam sites cunning.

More: http://castlecops.com/a6460-PayPal_Phishing_Site_Exploits_Google_XSS_Vulnerability.html

Discussion is locked