In an ongoing scam, more and more emails are being sent out from legitimate PayPal addresses with fake purchase notifications in an attempt to trick users into granting remote access to threat actors.
Bleeping Computer reports that over the past month, the security news outlet has received emails that state “You added a new address. This is a just a quick confirmation that you added an address in your PayPal account.” Also reported on the r/Scams subreddit, the email includes a message that claims to be a purchase confirmation for a MacBook M4 and includes a “PayPal customer support number” for the user to call if they did not authorize the purchase.
The goal is to trick recipients into thinking their account was hacked, and to call the scammers themselves at this support number. The number plays a recording that asks the caller to hold while it connects them to customer support; the person on the other end of the call is actually a scammer who will attempt to convince the caller into thinking that their PayPal account has been hacked.
