EarthLink customers, be aware of "EarthLink Alert Account Closure" emails like the one below. The fake email which claims the recipients' phone numbers on record is not correct, close or lock the recipients' Earthlink's accounts has been processed and completed is a phishing scam being sent by cyber-criminals. The phishing email tricks EarthLink customers into clicking on the link in it, which goes to a phishing website that steals Earthlink account credentials (usernames and passwords).
The "EarthLink Alert Account Closure" Phishing Scam
From: EarthLink <support@earthlink.net>
Date: Sat, 17 Feb 2018 07:07:37 -0500
To: EarthLink <support@earthlink.net>
Subject: EarthLink Alert: Account Closure
EarthLink® The phone number we have on record is not accurate. To correct this information and resume normal activity follow the link bellow: http://webmail.earthlink.net/verification <hxxp://andd.com.br/%3fearthlinkRoHBElI/>
This link was generated for your account and will expire within 12 hours. EarthLink Services Team © 2018 EarthLink, Inc. EarthLink and the EarthLink logo are registered trademarks of EarthLink, Inc. Trademarks are property of their respective owners. All rights reserved.
The link in the fake email message goes to a fake EarthLink website, which was created by cyber-criminals to trick their potential victims into entering their EarthLink usernames, passwords and credit card information on it. If the requested information is submitted by the potential victims, it will be sent to the cyber-criminals, who will use it to steal their personal information and use their accounts fraudulently. The cyber-criminals/scammers behind the phishing email message will change the website's name, so look out for similar phishing email messages with links that go to different phishing websites.
If you are tricked into submitting your EarthLink credentials and credit card information on the fake web page, please change your EarthLink password immediately and contact your bank and let them know that you have submitted your credit card information on a phishing website.
Remember, never click on a link to sign into your EarthLink account, always go directly to www.earthlink.net and log in from there instead.