Phishing for security-conscious victims

This isn't the first time we have ever seen a phishing attempt that tries to use good security advice to commit bad deeds. This phishing email we got today pretends to be from paypal.com (surprise!) and is warning users not to get caught up in identity theft. It offers a victims checklist, spoof tutorial, and tips to protect your account. One of the 'Merchant Offers' is even for 'Symantec Norton Anti-Spam'. This may be a cut-and-paste job from a real Paypal.com email, just heavily modified for evilness.

All you have to do to access these great tools is click the "Get Verified!" link which redirects you to a web server in .ro

And of course it includes a friendly note that says if you don't verify your account, it will be terminated within 72 hours. How lovely.