The "Bellsouth Server Removal Request" Phishing Scam
From: The bellsouth Accounts <support@bellsouth.net>
Date: April 17, 2018 at 8:45:08 AM CDT
Subject: Your account will be deactivated
Hello,
This is to inform you that your request on: 04/16/2018 2:22:30 p.m. to remove your account from bellsouth server has been approved and will initiate in one hour from the exact time you open this message.
Regards.
ignore this message to continue with email removal or
If this deactivation was not requested by you
Please reply us.
Regards,
bellsouth
The link in the phishing email message goes to a fake or phishing Bellsouth website, which will attempt to trick the potential victims into entering their usernames and passwords on it. If Bellsouth users attempt to sign into the phishing website with their Bellsouth usernames and passwords, it will be sent to the cybercriminals behind the email scam, who will use the information to hijack their accounts. The hijacked Bellsouth accounts will then be used by cybercriminals fraudulently.
Remember, if you receive email messages like these, please go directly to your email account instead of clicking on the links in the email messages. If there is something wrong with your account, it will be shown to you after signing in. And, if you were tricked by one of these phishing scams, please change your password immediately before your Bellsouth account is hijacked.
For victims whose accounts have already been hijacked, they should contact Bellsouth for help.