Other nomination
PayPal Security Flaw allows Identity Theft
Netcraft reports fraudsters actively exploiting XSS on paypal.com itself. The victim reaches a genuine PayPal URL under a valid 256-bit SSL certificate, but injected content claims the account is disabled and redirects to a fake login on a hex-encoded IP in Korea, which then harvests password, SSN, card number and ATM PIN.
Record
- Researcher
- Paul Mutton
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Paul Mutton, first published at the original source. Preserved copies are kept so the citation survives its host.