Here’s a new one. This came as an email from vleptn@paycal.com with subject “read…”
The text read:

You Have One New Private Message.

To view your message, please download the form attached to this email and open it in a web browser.

Thank you, Pay,Pal.

And a file – PP-ACC.html – was attached.

There’s no virus in the file or anything like that but if you download it and run it, you’re presented with a contact form, of sorts:

PayPal - Restore Your Account_1254771971130

So it looks pretty professional, but it’s running from your hard drive and if you fill out the form and submit it, it uses http://sosetephpone.com/tmp/bar-on.php or possibly http://sosetephpone.com/tmp/netsol-form.php to process. So if you send the form through, you’re sending all your info to those people – then you’re redirected to PayPal’s About Us page. (I did send the form through with false information telling them how much they sucked after removing the verification part of the code from the html so it would send through whatever I want. Otherwise, it tries to prompt you to enter in a valid pin, etc.)

Of course, we know from the email itself that this is NOT from PayPal. Remember, you can always tell right away because PayPal will ALWAYS ALWAYS address you as Dear First Name Last Name….

If you got this email, just spam it and/or delete it. And don’t fret, they don’t have your info already!

This has been another public service announcement, brought to you by the letters S, F, and the number 4.