My mom received an email today stating that she had sent an "updated invoice" to a client from Paypal. It correctly greeted her with her business name ("Hello XXXX") and the text showed an actual invoice she sent a few months ago. However, she did not send this invoice to the client, as the event has passed. She has already been paid. She did not even use her Paypal account today. I forwarded the email to Paypal (spoof@paypal.com) and they have confirmed it is not a phishing attempt.
I advised her to change her Paypal password. Her anti-virus software is up to date. Should she be concerned?
bearcatnat- Hmmm. If you're sure there's no viruses floating around there, she didn't click on any links in the email, and she's changed her password and security questions, I'd say she should be fine. I'm not entirely sure what someone would be trying to accomplish with this...the only thing I can come up with is a malicious link or attachment or something. Other than that, I'm not coming up with any way someone could, or would be able to, defraud her.
