The "EarthLink Suspicious Activity Detected " Phishing Scam
From: email@example.com <firstname.lastname@example.org>
Sent: Friday, July 19, 2019 4:01 AM
Subject: EarthLink Suspicious Activity Detected : Someone Knows Your Password
Dear Valued Subscriber,
YOUR EARTHLINK HAS BEEN LOCKED DUE TO INVALID LOGIN ATTEMPTS
Due To Security Measures, We Have Suspended Your EarthLink Account Due To
Multiple Invalid Login Attempts.
Someone Has Tried To Access Your EarthLink Account With Invalid Password From
Singapore, Access To Your EarthLink MyAcount Page Has Been Suspended,
Your Webmail Will Be Locked And You Be Disconnected From EarthLink Network If
You Do Not Click The Link Below To Safe Guard Your Account Within 24hrs Of
Receiving This Message.
We Strictly Advise You To CLICK HERE FOR ACCOUNT REACTIVATION Within 24hrs
Of Receiving This Message To Avoid Permanent Account Deactivation.
You Will Not Be Allowed To Reconnect, Sign Up For A New Account IF You Do Not
Click The Link Above To Regain Access.
EarthLink Account Support
The link in the fake email message goes to a fake EarthLink website, which was created by cyber-criminals to trick their potential victims into entering their EarthLink usernames, passwords and credit card information on it. If the requested information is submitted by the potential victims, it will be sent to the cyber-criminals, who will use it to steal their personal information and use their accounts fraudulently. The cyber-criminals/scammers behind the phishing email message will change the website's name, so look out for similar phishing email messages with links that go to different phishing websites.
If you are tricked into submitting your EarthLink credentials and credit card information on the fake web page, please change your EarthLink password immediately and contact your bank and let them know that you have submitted your credit card information on a phishing website.
Remember, never click on a link to sign into your EarthLink account, always go directly to www.earthlink.net and log in from there instead.