Phishers impersonating PayPal

environment-department.attractavoid876321870@ organizationa-language.com

From: PayPal Recipt
Sent: Thursday 26 July, 07:20
Subject: # RE : [ Statement Update Order ] Your Account PayPal Recipt Payment Paid Digital Ocean #IDC45SZG247
To: paypal@order.com

Notice the word 'Recipt' misspelling. Emails from the scammer coming in via group email list.

Attachments

Scammer took a snippet of PayPal

[Member reported the above phishing email to PayPal, and received this response, Never click on any links or attachments in similar emails, and take PayPal's advice if you do. - SH]

From: phishing@paypal.com.au
Sent: Thursday 26 July, 10:30
Subject: Thank you for your submission ZACVL  (KMM87166893V6*****"*)
To: xxxx


Dear xxxx, Thanks for letting us know about the suspicious email you received. We'll investigate it, and may contact you with additional details. If you haven't done so already, delete the email from your inbox. If you clicked on any links or downloaded any attachments within the suspicious email or website, log into your PayPal account and view your account activity. If you see any unauthorized transactions, go to the Resolution Center to report it. It's also a good idea to change your password. Additional Information & Help Learn more about fake emails and spoof by visiting our Help Center. Click Help & Contact on any page and then search for "fake emails" and "spoof". You can also find help on changing your password and viewing your account activity in the Help Center. Thanks for being a PayPal customer, PayPal Security *********************************************************************** Please do not reply to this email. If you need to contact us, please click Help & Contact at the bottom of any PayPal page. ***********************************************************************

Email:

PayPal

Your PayPal account has been limited you have to solve the problem in 24 hours
Hello PayPal customer,
We are sorry to inform you that you can not access all your paypal advantages like sending money and purchasing,due to account limitation .

Why my account PayPal™ is limited?
Because we think that your account is in danger from stealing and unauthorized uses.

What can I do to resolve the problem?
You have to confirm all your account details on our secure server by click the link bellow and following all the steps

LOGIN NOW

Hidden link in the body of the message: https: // account-security-information.naturisonline.ml/kila/check/

Return-Path: <www-data@ns1109.hostpartner.fr>
Received: from ns1109.hostpartner.fr (ns1109.hostpartner.fr [95.128.150.109])
Subject: Reminder: Your account will be limited until we hear from you !
X-PHP-Originating-Script: 33:sykes.php
Date: Mon, 8 Oct 2018
From: "service@paypal.fr" <paypal@info.com>
Reply-To: no-replay@domaine.us
X-Mailer: PHPMailer 5.2.10 (https: // github.com/PHPMailer/PHPMailer/)

Originating IP: 95.128.150.109
Originating ISP: Bretagne Telecom Sas
City: Rennes
Country of Origin: France