The links go to a phishing website disguised as a Yahoo sign-in page. If the visisors attempt to sign-in, their account credentials will be sent to the cybercriminals. The attached HTML form, also disguised as Yahoo sign-in page, does the same thing. But, remember, Yahoo will never ask their users to open an HTML or any other attachments, which request personal, account credentials or other sensitive information.
If you get Yahoo Sign in Notification emails, always go directly to your Yahoo account instead of clicking on the links in the emails. Once you are signed into your account, you will be notified and instructed on what to do, if there was an actual notification.
The "Yahoo Sign in Notification" Phishing Scam
From: Yahoo <boeowaterjet@yahoo.com>
Sent: Thursday, June 20, 2019, 11:37:40 PM GMT+2
Subject: Sign in notification from Yahoo
Yahoo
Hi User,
We sent a code to +254 754711791 which was used to sign in to your Yahoo account.
This sign in was on:
Device
firefox, windows nt
When
June 20, 2019 3:25:06 AM PDT
Where*
Kenya
197.182.196.232
If this was you, you're all set.
If this wasn't you:
Please visit the Attachment below to secure your account.
Review your phone numbers and email addresses and remove the ones that don’t belong to you.
Review your account activity and remove the devices and apps that you don’t recognize.
Thanks,
Yahoo