Several companies have implemented two-factor authentication recently, such as Twitter and LinkedIn.
According to Zscaler, cybercriminals are exploiting these announcements to increase the chances of success in their scams.
A perfect example is a recent spam designed to trick Yahoo into handing over their authentication credentials by informing them of a new “account upgrade.”
“You have 1 Important warning email! We advise you to update your account to resolve the issue. Click here [link] to proceed. Failure to do so will result in suspension and deactivation of your account,” reads the new spam message titled “Latest Update Warning! Update Now!”
Of course, the link contained in the email does not lead to a Yahoo website, but to a website designed to look like Yahoo and steal your credentials.
If you are a victim of this scam, change your Yahoo password immediately. If you use the same password on other websites, change your password on those as well.
