Quessa.com
A cross-site scripting flaw in the PayPal Web site allows a new phishing attack to masquerade as a genuine PayPal login page with a valid security certificate, according to security researchers.
Fraudsters are exploiting the flaw to harvest personal details, including PayPal logins, Social Security numbers and credit card details, according to staff at Netcraft Ltd., an Internet services company in Bath, England. The PayPal site, owned by eBay, allows users to make online payments to one another, charged to their credit cards, and login credentials for the service are a prized target of fraudsters.

Posted: 06|20|06 at 7:17 am. Filed under: UK News.