The "EarthLink Alert Account Closure" Phishing Scam
From: EarthLink <firstname.lastname@example.org>
Date: Sat, 17 Feb 2018 07:07:37 -0500
To: EarthLink <email@example.com>
Subject: EarthLink Alert: Account Closure
EarthLink® The phone number we have on record is not accurate. To correct this information and resume normal activity follow the link bellow: http://webmail.earthlink.net/verification <hxxp://andd.com.br/%3fearthlinkRoHBElI/>
This link was generated for your account and will expire within 12 hours. EarthLink Services Team © 2018 EarthLink, Inc. EarthLink and the EarthLink logo are registered trademarks of EarthLink, Inc. Trademarks are property of their respective owners. All rights reserved.
The link in the fake email message goes to a fake EarthLink website, which was created by cyber-criminals to trick their potential victims into entering their EarthLink usernames, passwords and credit card information on it. If the requested information is submitted by the potential victims, it will be sent to the cyber-criminals, who will use it to steal their personal information and use their accounts fraudulently. The cyber-criminals/scammers behind the phishing email message will change the website's name, so look out for similar phishing email messages with links that go to different phishing websites.
If you are tricked into submitting your EarthLink credentials and credit card information on the fake web page, please change your EarthLink password immediately and contact your bank and let them know that you have submitted your credit card information on a phishing website.
Remember, never click on a link to sign into your EarthLink account, always go directly to www.earthlink.net and log in from there instead.