The links go to a phishing website disguised as a Yahoo sign-in page. If the visisors attempt to sign-in, their account credentials will be sent to the cybercriminals. The attached HTML form, also disguised as Yahoo sign-in page, does the same thing. But, remember, Yahoo will never ask their users to open an HTML or any other attachments, which request personal, account credentials or other sensitive information.
If you get Yahoo Sign in Notification emails, always go directly to your Yahoo account instead of clicking on the links in the emails. Once you are signed into your account, you will be notified and instructed on what to do, if there was an actual notification.
The "Yahoo Sign in Notification" Phishing Scam
From: Yahoo <email@example.com>
Sent: Thursday, June 20, 2019, 11:37:40 PM GMT+2
Subject: Sign in notification from Yahoo
We sent a code to +254 754711791 which was used to sign in to your Yahoo account.
This sign in was on:
firefox, windows nt
June 20, 2019 3:25:06 AM PDT
If this was you, you're all set.
If this wasn't you:
Please visit the Attachment below to secure your account.
Review your phone numbers and email addresses and remove the ones that don’t belong to you.
Review your account activity and remove the devices and apps that you don’t recognize.
Check the comment section below for additional information, share what you know, or ask a question about this article by leaving a comment below. And, to quickly find answers to your questions, use our search
Note: Some of the information in samples on this website may have been impersonated or spoofed.
Comments, Questions, Answers, or Reviews
To protect your privacy, please do not post or remove sensitive information in or from your comments, questions, or reviews.
Write Your Comment, Question, Answer, or Review
NB: We will use your IP address to display your approximate location to other users.
Recommendation / Advertisement