I've just got a security message to my Yahoo account that basically tells me to follow a link and log in to secure access to my account otherwise it'll be locked for 48hrs.
1. I don't know if this is spam. It looks real and Yahoo do send naff out like this. Fair play if it's a fake....
2. If it's not a fake what in earth are Yahoo playing at! Sending an e-mail with a link to click on, etc.
Anyone help?
Dear Yahoo! member,
due to a numerous amount of unsuccessful login\'s within the last hour\'s we kindly ask you to login our ssl secured server to confirm that you are the actual owner of this account otherwise we would be forced to disable your account for the next 48hours due to our service & security agreement.
Please click this link to access our ssl secured login page.
Kind Regards
Yahoo! Service & Security Department
Link is : http://gratishoster.de/privat/sslsecure/yahoo.php#
Dodgy german site?
X-Apparently-To: xxxxxxx@yahoo.com via 66.218.93.92; Fri, 31 Oct 2003 06:22:00 -0800
Return-Path: <wwwrun@p15135059.pureserver.info>
Received: from 217.160.191.228 (EHLO p15135059.pureserver.info) (217.160.191.228) by mta109.mail.sc5.yahoo.com with SMTP; Fri, 31 Oct 2003 06:22:00 -0800
Received: by p15135059.pureserver.info (Postfix, from userid 30) id F2B3734C176; Fri, 31 Oct 2003 15:21:59 +0100 (CET)
To: xxxxxxxxx@yahoo.com
Subject: Yahoo! security & service notify
Content-Type: text/html; charset=windows-1254
From: "security@yahoo.com" <security@yahoo.com> | This is Spam | Add to Address Book
X-Mailer: System33r
Message-Id: <20031031142159.F2B3734C176@p15135059.pureserver.info>
Date: Fri, 31 Oct 2003 15:21:59 +0100 (CET)
Content-Length: 694
well. I had a similar issue with hotmail. I was told I would loose my account if I did not click a dodgy link, The message looked legit but I dnd't bother taking the risk. I havnt heard anything since.
Hopefully it'll warn a few people, I nearly fell for it.
Although I was determined not to hit the link.
I just spent 5 minutes going around the Yahoo help site
Although my yahoo messenger (throught Trillian) has stoped working in the last couple of days...
aeonf242,
I'd leave it for now, lloyds online banking have been having similar probs, where fake e-mails are sen't asking for the customers online details, which could allow he/she access to your account... Not good.. !
This could be a diff version of that.
"http://gratishoster.de" - which part of that domain name looks like "yahoo" to you ? ;)
GratisHoster? Correct me if I'm wrong, but doesn't that translate to "FreeHost"? Apart from that, it isn't true SSL either. HTTP instead of HTTPS.
I'd say the rule of thumb is, if you receive an email that is supposedly from your internet/email/etc service provider, asking you to put in passwords and the like, ignore the instructions and report it to the abuse department.
Look it was after a long bad Friday :-)