Learn about Zero Trust Architecture
Impenetrable cybersecurity without sacrificing usability
Gain detailed visibility into all your endpoints activities
Harden applications and hardware environments
Immediate and continuous response to incidents
Close the window of time your data could be exposed
Get your Comodo solutions setup, deployed or optimized
Control access to malicious websites
Defend from any internet based threats
Stop email threats before it enters your inbox
Preserve and protect your sensitive data
Keep your website running fast and malware free
Add encryption to your websites
Automated certificate mgmt. platform
Secure private intranet environments
Digital signature solutions for cloud apps
Encrypt emails for senders and recipients
Stay compliant with PCI DSS
Trusted authentication for IoT devices
Francisco Partners a leading technology-focused private equity fund, has acquired a majority stake in Comodo’s certificate authority business. Newly renamed from Comodo CA Limited to Sectigo Limited. Privacy Policies, Trademarks, Patents and Terms & Conditions are available on Sectigo Limited’s web site.
Meet the people behind the direction for Comodo
Get the latest news about Comodo
People are the key to achievement and prosperity
Stay up to date with our on-demand webinars
Worldwide: Sales, Support and General Inquiries
Schedule a live demonstration of our solutions
Need immediate help? Call 1-888-551-1531
Instantly removes viruses to keep your PC virus free
Experience true mobile security on your mobile apple devices
Secure Internet Browser based on Chrome
Chrome browser internet security extension
Submit a ticket to our support team
Share any product bugs or security flaws
Collaborate with research experts on data sets
Valkyrie Threat Intelligence Plugins
Valkyrie Threat Intelligence APIs
Comodo has identified a new PayPal phishing email, which is being sent via a server in Turkey. Because PayPal uses email to contact its customers, fraudsters can easily fake the name in the sender’s email address.
The email contains only a clickable image of a textual letter, with no text outside the image. The text in the image begins, “we need your help resolving an issue with your account.” The email redirects the user to a site in the Belarusian language, closely imitating the PayPal login page. The likely intention here is to forge PayPal accounts in a nefarious effort to collect credit card information.
While the user sees the message as having been sent from “PayPal Customer Service,” the email is actually sent from email@example.com RFC Sender: firstname.lastname@example.org. PayPal’s “Common email scams” webpage explains how sophisticated fraudsters can fake the entire reply name to look like a legitimate sender, so be careful.
The message redirects the user to “www.serviceprint.by,” which initiates the following process:
1. The user is redirected to a PayPal imitation login page
2. Any and all user credentials–including erroneous account information–will lead to an extended loading process
3. Users are then requested to update their billing address
4. Users are informed to enter their credit card information
5. Now the user is redirected to the legitimate PayPal site
PayPal urges its users to report suspect emails to email@example.com
According to PayPal’s website, emails from PayPal will:
Come from www.paypal.com. Scammers can easily fake the “friendly name,” but it’s more difficult to fake the full name. A sender such as “PayPal Service (zxk1942R3@gmail.com)” is not a message from PayPal. But sophisticated scammers can sometimes fake the full name, so look for other clues. An email from PayPal will always address you by your first and last names, or your business name.
Emails from PayPal will not ask you for sensitive information like your password, bank account, or credit card. A PayPal email will never contain any attachments or ask you to download or install any software.
Tags: phishing email,Phishing Scams
Reading Time: 3 minutes What Is Phishing? Phishing is a method employed by cybercriminals to access email accounts and systems using deception rather than defeating security protections. In basic phishing attacks, cybercriminals send an email that appears to be legal, tempting the victim to open an attachment or click on a link. This click could result in loading malware…
Reading Time: 2 minutes Phishing trap for One Drive users. How to avoid falling prey? Cybercriminals often use very cunning and inventive tricks to manipulate victim’s mind in phishing attacks. They aimed at eliciting data in such a way the victim doesn’t aware of it. For that purpose, the crooks use social engineering tricks. Recently Comodo specialists discovered a…
Reading Time: 2 minutes Cybercriminals’ big hunt for users’ credentials is gaining momentum rapidly. Their strategy usually stays the same: get attention of the victim, use social engineering techniques to make her run a malicious file, and then steal logins and passwords. But the tactic and the malware hackers use constantly changes. Let’s consider in detail the freshest example…
Sign up to our cyber security newsletter
Comodo Cybersecurity would like to keep in touch with you about cybersecurity issues, as well as products and services available. Please sign up to receive occasional communications. As a cybersecurity company, we take your privacy and security very seriously and have strong safeguards in place to protect your information.
See how your organization scores against cybersecurity threats
Advanced Endpoint Protection, Endpoint Detection and Response Built On Zero Trust Architecture available on our SaaS EPP