Online Threat Alerts (OTA) - Alerting you to scams and frauds.

"Yahoo Mail Reset Password Verification" Phishing Scam
Yahoo Mail Reset Password Verification Phishing Scam

Yahoo users who have received fake email messages like the one below, which claim a request to reset their passwords was received, are asked to delete them. This is because the fake email messages are phishing scams being sent by cybercriminals to steal Yahoo usernames and passwords, by tricking Yahoo users into visiting a phishing website or opening a HTML form that steals email account credentials.

The "Yahoo Mail Reset Password Verification" Phishing Scam

Yahoomail Office Support: Important Account Verificaton

Hello

Someone recently asked to reset your Yahoo Password

Note: You recently ask to reset your Yahoo Password if you didn't request this change let us know immediately by clicking the secure VG 2017 Agreement link and log in with your account correctly for secure access reasons

VG 2017 Agreement form

Open in Sheets

After signing in we will rectify your account immediately.

Thank you,

Best Regards

The link in the phishing email message goes to a fake or phishing Yahoo website or contains a HTML form, which will attempt to trick the potential victims into entering their usernames and passwords on it. If Yahoo users attempt to sign into phishing website with their Yahoo usernames and passwords, it will be sent to the cybercriminals behind the email scam, who will use the information to hijack their accounts. The hijacked Yahoo accounts will then be used by cyber criminals fraudulently.

Yahoo users who have received email messages asking them to click on a link to update or upgrade their accounts are asked to go directly to their email accounts at https://mail.yahoo.com, instead of clicking on the links in the email messages. If there is something that needs to be done to their accounts they will be notified after signing in. And, Yahoo users who have already been tricked by the phishing scam, are asked to change their passwords immediately before their Yahoo accounts are hijacked and used fraudulently.

waiting