A Sample of a "Yahoo Request to Disable Your Account" Phishing Scam
From: YAH00 ADMIN <email@example.com>
Sent: Monday, May 21, 2018 3:06 PM
Subject: Email Security Alert!
We recently received a request to Disable your Yahoo account and the process has
started by our Admin Team. Please give us 24 working hours to close your Email Account.
If this was you, you don't need to do anything else.
If this wasn't you, then someone may have tried to disable your Yahoo account.
Cancel the request by visiting: https://login.yahoo.com/account/cancel-request
and confirm your account information.
All files on your Email including (Inbox, Sent, Spam, Trash, Draft) will be deleted and
access to your Email: (firstname.lastname@example.org) will be DENIED if you ignore this Alert.
The link in the phishing email message goes to a fake or phishing Yahoo website, which will attempt to trick the potential victims into entering their usernames and passwords on it. If Yahoo users attempt to sign into phishing website with their Yahoo usernames and passwords, it will be sent to the cybercriminals behind the email scam, who will use the information to hijack their accounts. The hijacked Yahoo accounts will then be used by cybercriminals fraudulently.
Remember, if you receive email messages like these, please go directly to your email account at https://mail.yahoo.com, instead of clicking on the links in the email messages. If some needs to be done to your account, it will be shown to you after signing in. And, if you were tricked by one of these phishing scams, please change your password immediately before your Yahoo account is hijacked and used fraudulently.