New ask Hacker News story: Tell HN: PayPal scam email sent to my MyFitnessPal email address

Tell HN: PayPal scam email sent to my MyFitnessPal email address
10 by nathanaldensr | 2 comments on Hacker News.
In 2018, MyFitnessPal had a data breach[1]. Just now, I got an email sent to me claiming to be a PayPal transaction with a giant Cancel the Payment button. I use Fastmail as an email provider with a unique email address for each account I sign up for. This scam email was sent to my MyFitnessPal email address. Of course, the scammers know I didn't authorize this [fake] transaction and really badly want me to click that gigantic Cancel button. Don't click it! Clicking it leads to a fake PayPal authentication screen where they will steal your credentials if you enter them. Scam email: https://ift.tt/8NzW1ax Fake PayPal authentication website: https://ift.tt/8ouUQ3e Oftentimes, data acquired from breaches is not used immediately. Sometimes it can take months or years for the data to be sold to criminals that then organize scams such as this one. I wanted to let HN know about this just in case anyone else has or had a MyFitnessPal account and criminals have decided to mass-email all the stolen email addresses. [1] https://ift.tt/LjoMfWt

Comments