A new PayPal phishing attack has been confirmed with a critical twist: it’s phish-free. Here’s what you need to know.

If the user attempts to log in, however, the page automatically links the victim’s PayPal account with the email address of ...

In a blog article, a victim describes the criminals' approach. It cannot be traced, but Paypal may have already reacted.