Yahoo Email Phish

I found this Yahoo! phish that arrived today, claiming that you need to agree to updated conditions to use Yahoo email in the future. The email was sent from a Yahoo email address, likely compromised or potentially setup for the purpose of sending this phish, so it passes DMARC authentication checks and appears somewhat legitimate because it’s coming from a yahoo.com email address. The link, called out in red in the screenshot below, leads to a Weebly page asking for the victim’s email credentials.

Screenshot of original email with the linked URL called out in red.
Landing page of this Yahoo mail phish, hosted on Weebly

–Matt

1 thought on “Yahoo Email Phish

Leave a Reply

Your email address will not be published. Required fields are marked *