Watch out for this fake PayPal form that tries to steal your credit card info
Magecart attacks are some of the most destructive kinds of cyberattacks you can encounter online. The sneaky tactic involves hijacking an online store and recording a victim’s payment information. Once they fill out a form, the data is sent to a server owned and controlled by hackers. It’s like phishing you can’t see.
These attacks have cost victims millions of dollars collectively, and some online shopping platforms have been hit especially hard. Tap or click here to see how 2,000 online stores were hit by one Magecart campaign.
As tricky as Magecart attacks are, hackers are still refining their tactics to make them even more effective. And now, a new campaign is using fake PayPal forms to trick customers. We’ll show you how to spot it.
Watch out for your money! This isn’t a real PayPal page
A new Magecart tactic found by security researcher Affable Kraut may be one of the most convincing ever. It uses an unusual technique to inject fake PayPal forms into online stores, and any information entered into these forms gets stolen by the hackers behind the scheme.
This pattern goes a bit further than traditional Magecart attacks and their fake landing pages. To make itself as authentic-looking as possible, the Magecart system scans the victim’s shopping cart and checkout page and partially fills its fake PayPal forms with them.
If you’ve ever used PayPal, you might know that you can save your information to autofill once your password is typed in. If you check out with PayPal and see your information already filled out, you’d have no reason to assume something was wrong.
According to Kraut, it even passes along taxes and shipping information for extra details. These hackers are many things, but lazy isn’t one of them!
How can I spot the scam? What can I do to protect myself?
Even though this Magecart attack spoofs a PayPal form, you should still rely on secure payment methods like PayPal for online transactions. This is because PayPal encrypts your data and can offer some recourse in the event you get scammed.
If you have two-factor authentication activated for PayPal, you’ll be asked to enter your code before you can check out. Fake PayPal forms from the Magecart attack will not prompt a 2FA login, so we’d advise setting this up on your PayPal account for extra security. Tap or click here to see how to set up 2FA for some of the most popular platforms on the web.
In addition to 2FA, here are even more ways you can protect yourself from this kind of attack in the future.
Are you paying for Android apps you don’t use? Here’s how to cancel them
It’s so easy to get roped into a new subscription or two when you’re using your phone or tablet. It starts with those enticing free app trials and ends with months and months of autopayments for services you aren’t using.
Overpayment scams are back - Be careful who you sell your old stuff to
Scams come in many shapes and sizes, and they don’t always need tech to be effective. An emerging scam targeting online sellers doesn’t use any hacks or phishing sites to take money from victims — just good old fashioned social engineering.
Nasty shopping and shipping text scams spreading right now
With the holiday shopping season just around the corner, you’ve probably subscribed to all sorts of shopping notifications and shipping alerts. This is smart, since you’ll know exactly when your packages are due to arrive and when hot deals go live.
Scammers are out on Amazon Prime Day - 10 ways to protect yourself
Are you ready for Prime Day? One of the year’s biggest shopping events is just around the corner, which means you’ll have to beat the crowds if you want to snag the best deals.
Want a head start on all the best Prime Day sales? Tap or click here to see our favorite early deals.
Miss the old Facebook design? Here's how to get it back
Facebook is many things, but “easy to understand” isn’t one of them. There’s a definite learning curve to using the site, and certain options like settings and privacy features can be difficult for people who aren’t tech-savvy to find.
Watch out! Fake Paypal invoices tricking people into paying up
These days, there’s no shortage of ways to send money online. Whether you’re paying for goods and services or simply sending cash to family, you can easily transfer money securely with the help of an app like PayPal, Venmo or CashApp.
Massive shopping scams use great deals to fool you
Do you remember that old saying, “If it looks too good to be true, it probably is?” That warning is every bit as relevant today as it was when it originated. Buyers need to beware of retail scams because they’re everywhere — and that’s especially true in the age of online shopping.
The FTC is paying tech support scam victims - here's how to get your cut
There’s no shame in admitting when you’ve ever fallen for a scam. After all, you’re not the only one. Let’s face it, if they weren’t successful at finding new victims, cybercriminals would pack up and go home.
Instead, they stick around and come up with clever new ways to rip people off. A popular trend among thieves these days is spoofing websites and emails to make you believe they represent official companies. Tap or click here for examples of spoofed phishing scams.
Apple Pay vs. Samsung Pay vs. Google Pay: Which is better?
Technology has replaced a lot of things we used to take for granted, like landline phones, typewriters, and paper maps. But a lot of people are still carrying around something that tech companies would like to consign to history: wallets. Most of us now have access to an alternative to an old-fashioned wallet. The big three options for mobile payment systems are Apple Pay, Google Pay, and Samsung Pay. They all turn your smartphone (or certain smartwatches) into a mobile wallet, letting you pay for purchases without having to fish out a credit card or cash.
5 best ways to accept credit card payments for your business
The more you sell, the better your business does. It’s the simplest rule of business out there. But, as many business owners will attest, dealing with credit card payments can be a major headache. With so many credit card processing services to choose from, how do you know which is best for your business? We’ve put together this helpful comparison of the top five options.