{"id":205,"date":"2019-04-06T19:33:16","date_gmt":"2019-04-06T19:33:16","guid":{"rendered":"http:\/\/www.syyhoaxanalyzer.com\/?p=205"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T17:00:00","slug":"'Email-Deactivation-Warning'-Phishing-Scam","status":"publish","type":"post","link":"https:\/\/www.syyhoaxanalyzer.com\/?p=205","title":{"rendered":"&#8216;Email Deactivation Warning&#8217; Phishing Scam"},"content":{"rendered":"<div>\n<h2>Outline<\/h2>\n<p>Email claiming to be from the Mail Administrator claims that the recipient&#8217;s email address has been queued for deactivation due to an account error. The message instructs the recipient to click a link to resolve the problem and avoid account deactivation. \u00a0 <\/p>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- HS Net Top Content Responsive --><br \/>\n<ins class=\"adsbygoogle\"\n     style=\"display:block\"\n     data-ad-client=\"ca-pub-0355887770822260\"\n     data-ad-slot=\"4870821038\"\n     data-ad-format=\"auto\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<h2>Brief Analysis<\/h2>\n<p>The message is not from any mail administrator and the claim that the recipient&#8217;s address is set to be deactivated is untrue. The message is an attempt by cybercriminals to trick users into handing over their email account login details.<\/p>\n<p><b>Example<\/b><\/p>\n<div class=\"example\">\n<p><strong>Subject: Email Deactivation Warning<\/strong><\/p>\n<p>Dear [email address removed]<\/p>\n<p>This is an automatic message from our servers; If you are receiving this message it means that your email address has been queued for deactivation. This was as a result of a continuous error received from this email address (code:505).<\/p>\n<p>Please Click [Link Removed] to resolve this problem.<\/p>\n<p>Note: Failure to resolve this problem by ignoring this message would result to the deactivation of your account.<br \/>\nWe apologize for any inconvenience and appreciate your understanding.<\/p>\n<p>Regards,<br \/>\nMail Administrator.<\/p>\n<\/div>\n<p>&nbsp;<\/p>\n<h2>Detailed Analysis<\/h2>\n<p>This message, which purports to be from a &#8220;Mail Administrator&#8221;, warns recipients that their email address has been queued for deactivation due to a &#8220;continuous error&#8221; received from the account. The message instructs users to click a link in order to resolve the problem. But, warns the message, ignoring the instructions will result in the deactivation of the email account.<\/p>\n<p>However, the email is not from any administrator nor are the email addresses set to be deactivated as claimed. In fact, the message is a \u00a0<a class=\"norm\" title=\"Phishing Scams - Anti-Phishing Information\" href=\"https:\/\/www.hoax-slayer.com\/phisher-scams.html\">phishing scam<\/a> \u00a0designed to trick users into divulging their account login details to online scammers. Those who fall for the ruse and click the link will be taken to a bogus email login page as depicted in the following screenshot:<\/p>\n<p><a href=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/12\/mail-admin-phish.jpg\" data-rel=\"penci-gallery-image-content\" ><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"23606\" data-permalink=\"https:\/\/www.hoax-slayer.net\/email-deactivation-warning-phishing-scam\/mail-admin-phish\/\" data-orig-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/12\/mail-admin-phish.jpg\" data-orig-size=\"419,226\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"mail-admin-phish\" data-image-description=\"\" data-medium-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/12\/mail-admin-phish-300x162.jpg\" data-large-file=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/12\/mail-admin-phish.jpg\" class=\"aligncenter size-full wp-image-23606\" src=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/12\/mail-admin-phish.jpg\" alt=\"Fake webmail login form\" width=\"419\" height=\"226\" srcset=\"https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/12\/mail-admin-phish.jpg 419w, https:\/\/www.hoax-slayer.net\/wp-content\/uploads\/2018\/12\/mail-admin-phish-300x162.jpg 300w\" sizes=\"(max-width: 419px) 100vw, 419px\" \/><\/a><\/p>\n<p>Users who comply with the request and enter their details will then be presented with the following message:<\/p>\n<blockquote>\n<p><em>Your Information Has Been Submitted Successfully.<\/em><\/p>\n<p><em>Note: Inputting Wrong Information will result to de-activation of your email address.<\/em><\/p>\n<p><span class=\"fakeLink\"><em>Click Here \u00a0<\/em><\/span><em>to correct your submitted information.<\/em><\/p>\n<\/blockquote>\n<p>It is true that the information has been &#8220;submitted successfully&#8217;, at least from the point of view of the criminals operating the scam. In fact, the login information will be sent to these criminals and may subsequently be used to hijack the victim&#8217;s real email account. \u00a0<\/p>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<ins class=\"adsbygoogle\"\n     style=\"display:block; text-align:center;\"\n     data-ad-format=\"fluid\"\n     data-ad-layout=\"in-article\"\n     data-ad-client=\"ca-pub-0355887770822260\"\n     data-ad-slot=\"9162856233\"><\/ins><br \/>\n<script>\n     (adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<p> Once they have gained access to the compromised account, the criminals can lock out the legitimate owner. They can then use the account to send scam and spam emails that will look like they were sent by the legitimate owner.<\/p>\n<p>Often, such hijacked accounts \u00a0are used to send emails that falsely claim that the account owner is \u00a0<a href=\"https:\/\/www.hoax-slayer.net\/stranded-traveller-scams\/\">stranded in a foreign country<\/a> \u00a0or has suffered a serious mishap and is therefore in desperate need of money. Because these emails seemingly come from someone they actually know, at least a few recipients of these emails may fall for the ruse and send money as requested.<\/p>\n<p>Many similar phishing scam emails have been distributed by criminals in recent years. Most versions target a specific email provider such as \u00a0Hotmail, \u00a0Yahoo, \u00a0Gmail \u00a0or \u00a0Bigpond.<\/p>\n<p>This version takes a more generic approach, apparently in an attempt to snare users of any email service. The warning message makes no attempt to identify which email service that it supposedly originates from. So regardless of which email provider they use, victims who fall for the trap and submit their details may find that their accounts are quickly hijacked.<\/p>\n<p>No email provider is ever likely to send such a generic deactivation warning. Be cautious of any email claiming that there is a problem with your email account and you must click a link or open an attachment to resolve the problem or verify account details.<\/p>\n<p>It is always safest to log in all of your online accounts by inputting their account address into your browser&#8217;s address field rather than by clicking a link in an email.<\/p>\n<p><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- Third Content Ad Responsive --><br \/>\n<ins class=\"adsbygoogle\"\n     style=\"display:block\"\n     data-ad-client=\"ca-pub-0355887770822260\"\n     data-ad-slot=\"1909104632\"\n     data-ad-format=\"auto\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/p>\n<div align=\"center\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script><br \/>\n<!-- HS Net Bottom AdLinks --><br \/>\n<ins class=\"adsbygoogle\" style=\"display: block;\" data-ad-client=\"ca-pub-0355887770822260\" data-ad-slot=\"1358951439\" data-ad-format=\"link\"><\/ins><br \/>\n<script>\n(adsbygoogle = window.adsbygoogle || []).push({});\n<\/script><\/div>\n<p><\/br><\/br> Original Source : <a href=\"https:\/\/www.hoax-slayer.net\/email-deactivation-warning-phishing-scam\/\" target=\"_blank\">https:\/\/www.hoax-slayer.net\/email-deactivation-warning-phishing-scam\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Outline Email claiming to be from the Mail Administrator claims that the recipient&#8217;s email address has been queued for deactivation due to an account error. The message instructs the recipient to click a link to resolve the problem and avoid account deactivation. \u00a0 Brief Analysis The message is not from any mail administrator and the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":6890,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-205","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hoax-inggris"],"_links":{"self":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts\/205"}],"collection":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=205"}],"version-history":[{"count":0,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/posts\/205\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=\/wp\/v2\/media\/6890"}],"wp:attachment":[{"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.syyhoaxanalyzer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}