In an ongoing scam, more and more emails are being sent out from legitimate PayPal addresses with fake purchase notifications in an attempt to trick users into granting remote access to threat actors.