The "Yahoo Mail 10.1 Upgrade" email below, which claims recipients' Yahoo Mail version is outdated and has expired, is a phishing scam being used to target Yahoo customers. The phishing email message, which also claims that if the recipients do not update their information, their accounts will be permanently closed, is being sent by cybercriminals to trick Yahoo customers into clicking on the link in it. The link in the email message goes to a fake Yahoo website that will ask visitors to sign-in. Once visitors attempt to sign into the fake website with their Yahoo credentials, the information will be sent to the cybercriminals behind the phishing scam.
A "Yahoo Mail 10.1 Upgrade" Phishing Scam
From: Yahoo! Mail Team [yah00@noreply.comms.us.yah00.com]
Sent: Wednesday, April 10, 2019, 6:51:39 AM PDT
Subject: Security upgrade
Your Mail version is outdated,
Follow the link below and accept our new terms and conditions
for new improvements on your account.
Failure to Upgrade to the newest Yahoo Mail 10.1 now will result
to a permanent account closure
www.yahoo-sign-in/verify/index.com
Thanks,
Yahoo! Mail Team
Once the cybercriminals have received the stolen Yahoo credentials, they will use it to hijack their potential victims’ accounts and use the accounts fraudulently. This is why Yahoo customers should never click on links in email messages to sign into their accounts, they should instead, go directly to https://www.yahoo.com/ and sign into their email accounts from there. If there is someone that needs to be done their accounts, they will be notified after signing in.
Yahoo customers who have been tricked by the phishing scam are asked to contact Yahoo for help.