Yahoo users, be aware of fake "automatic update notification" emails like the one below, which claim that you need to learn more about the latest version of Yahoo Mail. The fake emails are phishing scams being sent by cybercriminals to steal Yahoo usernames and passwords, by tricking Yahoo users into visiting a phishing website that steals email account credentials.
The "Your Yahoo Mail Automatically Updated" Phishing Scam
From: Yahoo Mail <3107283355868@ bcemail.overview.update.mails.i71xz1cwa77nopugc9ebej-idhnmxalflgtaoctduzpibfceyahoo.com>
Date: February 2, 2019 at 10:48:09 AM CST
Subject: Your Yahoo Mail automatically updated
We have a new unified Terms of Service and Privacy Policy
Dear Yahoo Member johnwblanton@yahoo.com,
The latest version of Yahoo Mail became available in June 2017. It has a refreshed design that provides a fast, reliable and intuitive experience. To learn more about the latest version of Yahoo Mail.
Overview Update
For more information on which web browsers the latest version of Yahoo Mail supports, please visit https://help.yahoo.com/kb/new-mail-for-desktop/sln4556.html.
Thank you for being a loyal Yahoo Mail member.
The Yahoo Mail Team
The link in the phishing email message goes to a fake or phishing Yahoo website, which will attempt to trick the potential victims into entering their usernames and passwords on it. If Yahoo users attempt to sign into the phishing website with their Yahoo usernames and passwords, it will be sent to the cybercriminals behind the email scam, who will use the information to hijack their accounts. The hijacked Yahoo accounts will then be used by cybercriminals fraudulently.
Remember, if you receive email messages like these, please go directly to your email account instead of clicking on the links in the email messages. If there is something wrong with your account, it will be shown to you after signing in. And, if you were tricked by one of these phishing scams, please change your password immediately before your Yahoo account is hijacked.
For victims whose accounts have already been hijacked, click here for help.