A Reg reader has produced screen shots that demonstrate a powerful phishing technique that's able to spoof eBay, PayPal and other top web destinations without triggering antiphishing filters in IE 7 or Norton 360. Plenty of other PayPal users are experiencing the same ruse, according to search engine results.

Matty Hall, a London resident who runs a nightclub and record label, says he's been careful to practice good PC hygiene. He runs Norton 360 and uses the latest IE version, which Microsoft has taken pains to lock down with a variety of safety features, including one that alerts users when they visit many spoofed sites. He's also careful to examine the certificates that accompany financial sites he visits before logging in to them.

So Hall was surprised recently when, after attempting to log in to a PayPal page that both IE and Norton had given a clean bill of health, he was prompted for his date of birth, social security number, mother's maiden name, credit card details and other sensitive information. Aside from the verboten solicitation for so much detailed information, about the only thing that looked suspicious was the poor grammar and awkward syntax of the accompanying text. It read....

Link to news story...