Online Threat Alerts (OTA) - Alerting you to scams and frauds.

"Yahoo Attempt to Sign in from an Unrecognized Device" Phishing Scam
Yahoo Attempt to Sign in from an Unrecognized Device Phishing Scam

Yahoo users should be aware of fake email messages like the one below, which claim that an attempt to sign into their Yahoo accounts from an unrecognized device. The email messages are phishing scam being sent by cybercriminals to steal Yahoo usernames and passwords, by tricking Yahoo users into visiting a phishing website that steals email account credentials.

The "Yahoo Attempt to Sign in from an Unrecognized Device" Phishing Scam

Subject: unexpected sign in!

Date: Fri 29/09/2017 08:51

From: "Yahoo"

Hi,

On September 15, 2017 at 5:04 AM, we noticed an attempt to sign in to your Yahoo account from an unrecognized device in Scranton, PA.

If you made this sign in , you're all set.

If not, use this link to prevent anyone from accessing your account .

Thanks for taking this additional step to keep your account safe.

Yahoo

Replies sent to this email cannot be answered. Feel free to reach out to customer care with any questions or concerns.

The link in the phishing email message goes to a fake or phishing Yahoo website, which will attempt to trick the potential victims into entering their usernames and passwords on it. If Yahoo users attempt to sign into phishing website with their Yahoo usernames and passwords, it will be sent to the cybercriminals behind the email scam, who will use the information to hijack their accounts. The hijacked Yahoo accounts will then be used by cybercriminals fraudulently.

Remember, if you receive email messages like these, please go directly to your email account instead of clicking on the links in the email messages. If there is anything wrong with your account, it will be shown to you after signing into your account. And, if you were tricked by one of these phishing scams, please change your password immediately before your Yahoo account is hijacked.

8

Comment sectionComments / Answers (8)

Remove sensitive information from your post. Your IP address will be used to display your estimated location.

Comment count 8

by an anonymous user from: Flagler, Palm Coast, Florida, United States

Here's one I found this morning

From: info-preobliged.com

To: s30m-yahoo.com

HI ,


Someone using an unrecognised device attempted to sign in to your Yahoo account.

This sign-in attempt was made on:

Device

chrome, windows nt
When

Mon, 03 Oct 2022 18:18:04 -0400
Where*

Maryland, United States

198.7.58.79

If this was you, you don’t need to do anything else.

Didn’t sign in recently?

Review your account activity and remove the devices and apps that you don’t recognise.

https://login.yahoo.com/account/activity
Thanks,

Yahoo

Delete


by an anonymous user from: Minneapolis, Minnesota, United States

It used to be fairly easy to recognize phishing emails but these Yahoo email scams are getting pretty sophiticated.
I received one the other day (April 2020) that was rather convincing but after some consideration decided it wasn't legit. Why? Because these tech service providers would never admit to having had a breach in their security systems. That is the type of data they bury.
But it isn't just Yahoo.

I use paper for most of my communications. The trees need to be thinned out anyway, before they kill one another off via overcrowding. Ironic, no?

Delete


by an anonymous user from: Leiden, South Holland, Netherlands

I seem to be getting similar messages that appear to be legit, at least the link goes to a working site on the Yahoo domain that shows actual sign in activity.
However the sending mail address is not from Yahoo.com but yahoo-inc.com which is indeed suspicious.


Yahoo
To:(me)

HI ,
(mail address)
Are you trying to sign in?
If so, use this code to finish signing in.
(code)

This sign in attempt was made on:
Device (device)
When
April 7, 2020 2:09:07 AM PDT
Where*
Vietnam
118.68.226.66
Didn’t sign in recently?
Review your account activity and remove the devices and apps that you don’t recognize.
https://login.yahoo.com/account/activity
Thanks,
Yahoo

Delete


by an anonymous user from: London, England, United Kingdom

I've had exactly the same email. My instinct is Phishing. I'll avoid following the email link and go direct to my account where i'll be changing my password for posterity. Better safe than sorry.

Delete


by info

"From: Yahoo Security
Sent: Friday, July 5, 2019, 04:19:56 PM GMT 2
Subject: ✉ FINAL WARNING: We detected an unusual sign-in attempt

YAHOO!

Dear Account User,


We detected an unusual sign-in attempt to your account from an unrecognized device with IP address 195.85.32.16. (United States).

Please visit this link below to cancel unusual sign-in and resolve the problems or your account will be temporarily blocked for security reasons. Delete Unusual Attempt

Thanks for making this additional step to secure your account.

Yahoo Mail Team."

Here is another scam.

Delete



by info

Here is another scam:

"From: AT&T Yahoo Mail
Date: April 29, 2019 at 2:44:38 PM PDT
Subject: Unexpected sign-in attempt
Reply-To: AT&T Yahoo Mail

AT&T Yahoo

Someone on an unrecognized device attempted to sign in to your AT&T Yahoo Account.

This sign in attempt was made on: 29 ( April ), 2019

Review your account activity and remove the devices and apps that you don’t recognize.

Review Now

Thanks,
AT&T Yahoo Mail
Powered by Microsoft Excel"

Delete


by info

Remember, Yahoo will never ask you for your password in an email. If you don’t trust a link in an email, go directly to the normal sign in page via yahoo.com.

Delete


by info

Here is another scam:

"From: "Yahoo! Mail"
Date: December 19, 2017 at 5:20:45 PM CST
Subject: Unexpected sign-in attempt
Reply-To: yah00.alert.reply.077-mail.com

AT&T Yahoo

Hi
On December ,19 2017, we noticed a successful de-activation your Yahoo account from an unrecognized device in Italy.
We attending to this request and soon we will close down your account in 48hrs. If this wasn't you and you think you are receiving this messages mistakenly, please click here to sign in back again in order to keep your account active, otherwise your mailbox will be shut down.

Thanks
Yahoo"

Delete


waiting