"Yahoo Scheduled Maintenance" Phishing Scam
The "Yahoo Scheduled Maintenance" email message below, which claims due to congestion all unused Yahoo accounts will be removed if they do not validate, is a phishing scam. The phishing email is being sent by cybercriminals to trick Yahoo users into clicking on the link in it, by falsely claiming that their email accounts will be closed if they do not take action. But, the link in the email message goes to a fake Yahoo website that will ask visitors to sign-in. Once visitors attempt to sign into the fake website with their Yahoo usernames and passwords, their information will be sent to the cybercriminals behind the phishing scam.
The "Yahoo Scheduled Maintenance" Phishing Scam
----- Forwarded Message -----
From: Yahoo! - alerts@notification.security.yahoo.com
Sent: Sunday, June 2, 2019, 8:08:03 PM GMT+2
Subject: đźš«âť— [ Scheduled Maintenance ]
Yahoo
Scheduled Maintenance
Dear Yahoo! Member,
Due to congestion in all Yahoo! Mail users account, there shall be a removal exercise of all used and unused Yahoo Accounts.
Yahoo! required you Click Here to validate your account immediately.
Yahoo - login
Thanks,
Yahoo
Once the cybercriminals have received the stolen Yahoo usernames and passwords, they will use it to hijack their potential victims’ accounts and use the accounts fraudulently. This is why Yahoo user should never click on links in email messages to sign into their accounts, they should instead, go directly to https://mail.yahoo.com and sign into their email accounts from there. If there is someone that needs to be done their accounts, they will be notified after signing in.
Yahoo users whose accounts have already been hijacked are asked to go to https://mail.yahoo.com and click the "Trouble signing in?" link for help regaining access to their accounts.
Check the comment section for additional information, or share what you know or ask a question about this article, by clicking the 'View or Write Comment' button below.
Note: Some of the information in samples on this website may have been impersonated or spoofed.