They do not display the items that are being shipped. The emails, however, have one difference. These are all fake, but the spammers rely on the fact many people order multiple packages from the shopping giant and won't pay attention. Victims receive a standardized Amazon Order Confirmation form, containing an order number, payment summary, and an estimated delivery date. Researchers for EdgeWave discovered the campaign and quickly realized that the end-goal was to trick unsuspecting Amazon customers into downloading the dangerous Emotet banking Trojan. Once installed, Optimize Android requests the user to turn on a malicious access service disguised as 'Enable statistics.' If the user enables the service, the malicious app checks the target system for the official PayPal app and if found, the malware triggers a PayPal notification alert prompting the victim to open the app. Tens of other battery optimization apps use the same logo, as well as featuring similarly unobtrusive names. The malware poses as a battery optimization app, called Optimization Android. In this case, the payment failed because it was a test account without enough funds to process the payment.

As soon as the researcher enters their 2FA code, the account automates a payment to a pre-configured account. What you see in that video is the researcher logging into a test account with their 2FA code. Midway through December security experts at ESET announced the discovery of a new Android malware that steals money directly from PayPal accounts- even with two-factor authentication turned on.ĮSET security researchers released the above video detailing how the malware works.

Paypal hack 2019