"Internet security experts have discovered a new phishing scam that uses voice recordings to pilfer money from PayPal accounts.

In the newest social engineering attack, identity thieves have spammed fake PayPal account compromise warnings to lure users into dialing a phone number and giving up credit card information.

Unlike normal phishing e-mails, there is no URL or response address. Instead, the e-mail urges the recipient to call a phone number and verify account details.

eWEEK has confirmed that the phone number embedded in the e-mail was active and accepting credit card entries at midday on July 7."

Article Link: http://www.eweek.com/article2/0,1895,1985966,00.asp