SE Labs

Special Edition
Computer security testing comment and analysis from SE Labs

Poor grammar foils spammer

paypal_phishing-8920243

It’s great that even if your mastery of a language isn’t brilliant, other people from across the planet can still understand you. It’s an amazing human ability that brings us together as a species, but when the people writing phishing attacks try to sound plausible in a language they don’t sufficiently understand, the results can be unconvincing:

“Please take a few minutes out of your online experience to know why PayPal had to limit your account and know how you are best able to easily restore your access as usual.”

It’s our old friend the Fake Security Notice phishing attack. This is the opening gambit of a surprisingly old school technique we’ve been monitoring all week with the SE Labs spam-pot network.

It goes on:

“We need some information from you. We have provided a form for you to complete, please open the attached file in this email in your browser. After our security team reviewed your information, we can then lift the limitations from your PayPal account.”

Not very convincing unless you read it too fast, and there’s a sort of old fashioned feel to the language. Also, poor grammar and punctuation.

It could be that the targets of this campaign are people who speak English as a second language, some of whom may not spot the problems that mark it out as unusual.

It should, however, go without saying that if you receive an email from someone calling themselves PayPal you should log into and check your PayPal account using your usual method, and not by clicking the link in the email. PayPal (and other financial institutions) never ask for passwords or other private information via email.

Author: Jon Thompson (Email: jon@selabs.uk; Twitter: @jon_thompson_uk)

About

SE Labs Ltd is a private, independently-owned and run testing company that assesses security products and services. The main laboratory is located in Wimbledon, South London. It has excellent local and international travel connections. The lab is open for prearranged client visits.

Contact

SE Labs Ltd
Hill Place House
55A High Street
Wimbledon
SW19 5BA

020 3875 5000

info@selabs.uk

Press