Phishers target PayPal and Ebay users the most

Users of eBay and PayPal, its associated payment service, are the main targets of phishing emails according to Sophos.

Research issued earlier this year by the IT security firm revealed that 58 per cent of people receive at least one phishing email every day. But Sophos said over 75 per cent of all phishing emails are targeting users of the formerly mentioned services.

Most of the time these fraudulent emails point recipients to a bogus website which looks like the real PayPal or eBay site.

The aim is to steal usernames and passwords.

Experts at SophosLabs, the company's global network of threat analysis centres, scanned all phishing email messages received during 2006, and have found that 54.3 per cent were attempting to steal information from users of PayPal.

The second most common targets, at 20.9 per cent, were users of the eBay online auction service.

"The reason why the phishers focus so much on PayPal and eBay is because they are so popular around the world. Although bank customers do also suffer from phishing attacks, they tend to be less likely to have the global reach that these net giants have," said Graham Cluley, senior technology consultant for Sophos.

"PayPal and eBay have worked hard to educate and protect their customers from these kind of attacks, but the best solution is for computer users to be more savvy about securing their identity in the first place, and think before they click."

PayPal and eBay, like Sophos, are members of the Anti-Phishing Working Group (APWG), an organisation dedicated to wiping out internet scams and fraud.