Democratic Underground Latest Greatest Lobby Journals Search Options Help Login
Google

At PayPal log-in, am getting "Security check information required"

Printer-friendly format Printer-friendly format
Printer-friendly format Email this thread to a friend
Printer-friendly format Bookmark this thread
Home » Discuss » DU Groups » Computers & Internet » Computer Help and Support Group Donate to DU
 
Sal Minella Donating Member (1000+ posts) Send PM | Profile | Ignore Thu Sep-16-10 01:34 PM
Original message
At PayPal log-in, am getting "Security check information required"
Edited on Thu Sep-16-10 01:48 PM by Sal Minella
page which lets me go no further, and I can't access my PayPal account (which has a balance in it -- or did before I got locked out of it by the phish-scammers).

The page looks exactly like the scam e-mail "security information check" shown as Number 1 on the list that appears when you google "PayPal" on Snopes.com.

I've sent a report to PayPal but have received nothing back yet.

Is there something I can do on my end to get past this stupid phish-page???

Edit to add:
This is the start of the text on the fake web page when I try to sign into my account:

============================================
Security Measures

We are currently performing regular maintenance of our security measures. Your account has been randomly selected for this maintenance, and you will now be taken through a series of identity verification pages.
============================================

It then asks for my Visa card number and my bank account number, both of which PayPal has been using happily for many years without a glitch.

Refresh | 0 Recommendations Printer Friendly | Permalink | Reply | Top
struggle4progress Donating Member (1000+ posts) Send PM | Profile | Ignore Thu Sep-16-10 02:33 PM
Response to Original message
1. I'm no expert, but there are several immediate possibilities
The first is malware on your machine; another is a poisoned DNS cache somewhere

If I were you, I'd do at least the following:

Record somewhere the URL that you're getting redirected to; this is so you can actually block it, if need be
Clear your browser cache
Now thoroughly examine your security. Is your anti-virus up-to-date? Are you running a firewall? Do a thorough malware scan; you may want to do several different scans, using more than one product. Be sure to look for trojans and spyware. Make sure your security scans emails and so on for malicious attachments automatically. Consider whether the browser you're using is really secure
Also ask yourself if you're using a secure DNS

I wouldn't be doing any sensitive online transactions until I nailed this down

Printer Friendly | Permalink | Reply | Top
 
Sal Minella Donating Member (1000+ posts) Send PM | Profile | Ignore Thu Sep-16-10 02:49 PM
Response to Reply #1
2. I don't know what a "DNS cache" is.
I scan with Malwarebytes daily (the $25 version purchased after PayPal blockage developed).

Avast! scans and updates several times a day (have had this for many months).

I can copy the url address of the webpage that shows up demanding my bank/visa #s (it's an absurdly long url address) -- can I plug this in somewhere on a "block" listing to get rid of it?

Off to clear browser cache. (I have run CCCleaner recently, which I believe clears old caches?)

I use Firefox as browser and have had no problems with it, except really jerky videos, which I can live with.
Printer Friendly | Permalink | Reply | Top
 
struggle4progress Donating Member (1000+ posts) Send PM | Profile | Ignore Thu Sep-16-10 03:20 PM
Response to Reply #2
3. Somewhere off in cyberspace is a big dictionary that you're using
to translate "http://www.democraticunderground.com" into something like "216.158.28.197" more useful to the electronic machinery. There are lots of copies of these dictionaries out there, and they're not necessarily all secure. I don't know how to set DNS in XP since I primarily use OSX and Linux, but you can probably figure it out by googling. Popular options seem to be OpenDNS and Google's public dns

https://store.opendns.com/setup/computer/
http://code.google.com/speed/public-dns/

You might try this at minimum to stop redirecting to a spoof page:

Stop Automatic Redirects To Other Websites with Firefox 3
http://technofriends.in/2009/01/18/how-to-stop-automatic-redirects-to-other-websites-with-firefox-3/

Apparently, there are firefox add-ons that can be used to block websites; I haven't tried any. You can also edit host file; but I haven't tried that eiuther
Printer Friendly | Permalink | Reply | Top
 
Sal Minella Donating Member (1000+ posts) Send PM | Profile | Ignore Fri Sep-17-10 01:05 PM
Response to Reply #3
8. Thanks for your post -- PayPal is in process of fixing the problem.
Somebody apparently did try to hack my account, and PayPal shut it down.

So I am in process of proving that I am who I say I am to have access again.

Thanks for your help --
Printer Friendly | Permalink | Reply | Top
 
blogslut Donating Member (1000+ posts) Send PM | Profile | Ignore Thu Sep-16-10 03:51 PM
Response to Original message
4. This was an email message?
And you clicked on their link?

Never, never, never do that. Always, always, go to www.paypal.com to log in and look for messages from the company. Paypal is awful about preventing spoof emails. As a rule of thumb, ignore all emails from PayPal.
Printer Friendly | Permalink | Reply | Top
 
Sal Minella Donating Member (1000+ posts) Send PM | Profile | Ignore Thu Sep-16-10 04:16 PM
Response to Reply #4
5. No, No, No!!!
I included the snopes e-mail spoof listing only to show the web page that appears when I try to log into my PayPal account.

I would never ever fall for such an obvious spoof in an e-mail -- but I can't figure out how to get past this page to get into my PayPal account.

Printer Friendly | Permalink | Reply | Top
 
hobbit709 Donating Member (1000+ posts) Send PM | Profile | Ignore Thu Sep-16-10 08:15 PM
Response to Original message
6. Does the address bar on the login page look like this?
Edited on Thu Sep-16-10 08:32 PM by hobbit709
https:// and then followed by paypal.com

If it doesn't, then there's something wrong.
Printer Friendly | Permalink | Reply | Top
 
Sal Minella Donating Member (1000+ posts) Send PM | Profile | Ignore Thu Sep-16-10 11:04 PM
Response to Reply #6
7. Mystery solved.
Apparently somebody else tried to gain access to my PayPal account and PayPal closed it down, and was demanding my numbers again to make sure it was the account's owner seeking access.

The page I thought was a phony phishing page was the real thing -- the "phishing" e-mail shown by Snopes was obviously copied from the sign-in page PayPal uses.

New password registered, should be good to go.

Thanks for your response, and yes that's what the url looked like, and PayPal eventually assured me it's the Real Thang.
Printer Friendly | Permalink | Reply | Top
 
DU AdBot (1000+ posts) Click to send private message to this author Click to view 
this author's profile Click to add 
this author to your buddy list Click to add 
this author to your Ignore list Wed Dec 24th 2025, 08:05 AM
Response to Original message
Advertisements [?]
 Top

Home » Discuss » DU Groups » Computers & Internet » Computer Help and Support Group Donate to DU

Powered by DCForum+ Version 1.1 Copyright 1997-2002 DCScripts.com
Software has been extensively modified by the DU administrators


Important Notices: By participating on this discussion board, visitors agree to abide by the rules outlined on our Rules page. Messages posted on the Democratic Underground Discussion Forums are the opinions of the individuals who post them, and do not necessarily represent the opinions of Democratic Underground, LLC.

Home  |  Discussion Forums  |  Journals |  Store  |  Donate

About DU  |  Contact Us  |  Privacy Policy

Got a message for Democratic Underground? Click here to send us a message.

© 2001 - 2011 Democratic Underground, LLC