Online users, beware of fake password request change email messages sent by cybercriminals to trick their potential victims into clicking on a link within the same email messages that go to phishing websites created to steal their email account credentials (user names and passwords). Below is a sample of one of the phishing password request change email messages that claims that the passwords for the recipients' email accounts were recently requested for a change. Recipients of the same email message should delete it and not follow the instructions in it.
The Phishing or Fake Password Request Email Message
Subject: Re: You Have Requested Password Change
Hi ,
The password for your Email Account , was recently requested for changed which we need your Authentication. Please if you have NOT requested for a new password copy the below link fill and submit to save your account:
http://nuceraviaggi. it/outchef/index.php
This is just a notification for your account safety.
Have a great day!
Web Administrator Team
The link in the fake email message goes to a phishing website created to steal personal information and email account credentials. Therefore, the information submitted on the phishing website, which includes personal information, email account user names and passwords, will be sent to the cybercriminals who created it. Once the cybercriminals have received the stolen information, they will use it to hijack their victims’ email accounts and use them fraudulently. Online users who have received the fake email message and have followed the instructions in it, should change their email account passwords immediately, before it is taken over by cybercriminals.
It is important that online users know that they should never click on a link in an unexpected email message to sign into their online accounts, and fill out forms that require sensitive information.