paypal

Nemessis found another XSS in PayPal, and I must say this is a very clever one! Take a peek with Firefox and see what I mean. Good stuff, because it shows how hard it really is to protect yourself from. Logically this is a spot they forgot.http://rstzone.org/forum/

I found this on the sla.ckers board posted by Nemessis. It shows a PayPal XSS hole, one of the most sought after vulnerabilities. Again, it also shows that they still have issues.crmgateway.paypal.com/payflow/cgi-bin/mail_pcancellation.pl?host=remote&processing=Yes&partner_login="><script>alert(/Nemessis-WWW.RSTZONE.ORG/)</script>

So far, we have seen many fake pages of sites like PayPal, eBay etc. which were used for phishing purposes. Now, here are some Google-like sites - www.google-find-it.com and www.qooqqle.com - which offer fake/irrelevant search results.

Here's a screenshot of www.google-find-it.com:  read more »

Here's small comparison between fake and real PayPal login pages. Spot the phishers!
 read more »