Notice the link
https://login.yahoo.com/account/change-password looks legit right but the actual link is https://yahoo.phlogin.com/account/?scrump=dmlwZXJ0ZWszQHlhaG9vLmNvbQ== and this website is a hacker scammer phishing site. Do not fall for this old trick in the book, it call social hacking or also known as fear hacking making you to get scared and need to recover your account by clicking on the link right away without thinking it’s a hacking website.
On Tuesday, January 22, 2019, 1:48:05 AM EST, Yahoo [email protected] wrote:
Yahoo
Hi @yahoo.com,
Someone on an unrecognized device attempted to sign in to your Yahoo account.
This sign in attempt was made on:
Device
chrome mobile, android
Where*
Dandong, Liaoning, China
175.167.152.212
If this was you, you’re all set!
Didn’t sign in recently?
Review your account activity and reset your password immediatly.
https://login.yahoo.com/account/change-password
Thanks,
Yahoo
We will never ask you for your password in an email. If you don’t trust a link in an email, go directly to the normal sign in page via yahoo.com.
*Location is approximate based on the IP address it originated from.