Yahoo Mail - scam OR NOT?

For discussions about security.
Post Reply
ozsouth
Posts: 1359
Joined: Sun Jul 12, 2020 2:38 am
Location: S.E. Australia
Has thanked: 210 times
Been thanked: 602 times

Yahoo Mail - scam OR NOT?

Post by ozsouth »

Yahoo mail are allegedly making security changes on 20 Oct 20, which will make Seamonkey Mail quite possibly unusable. Have submitted query to Yahoo & will update later.
** UPDATE - it's a scam - DO NOT CLICK ON EMBEDDED LINKS IF YOU GET THIS - see below **
** UPDATE 2 - I now have an email from the same person saying it really is changing - see below **
Last edited by ozsouth on Wed Aug 26, 2020 7:07 am, edited 5 times in total.
perdido

Re: Yahoo Mail - big changes

Post by perdido »

Hi Ozsouth,
I got the same email and am interested in whatever you find out. I access the yahoo email server using sylpheed via smtp.

The email they sent was kind of creepy and makes me wonder what personal info they are going to try and steal. They seem to be pushing some kind of app? For "security" LOL

My guess is they are trying to get something installed on phones where they can get total access to all our info. This may be the end of the road for me. For anyone interested here is a copy of the email.
We love that you love using your Yahoo Mail. And we want to make sure you always have the best experience. That’s why we’re reaching out today.
We’ve noticed that you’re using non-Yahoo applications (such as third-party email, calendar, or contact applications) that may use a less secure sign-in method. To protect you and your data, Yahoo will no longer support the current sign-in functionality in your application starting on October 20, 2020. This means that you will need to take one of the steps below to continue using Yahoo Mail without interruption.
But don’t worry, you have options. Find an option that works best for you below:
Option 1: We recommend that you access your email using our free Yahoo Mail app for iOS and Android or simply go to mail.yahoo.com to access Yahoo Mail on the web.
Option 2: Keep your current, non-Yahoo app, BUT follow a few steps to get it to sync with our secure sign-in method. The steps vary across different email applications, but in most cases, you will have to remove your Yahoo account from the app and then add it back again to update the sign-in security. Use the links below to follow the specific steps for your current application:
iOS Mail
Gmail
Samsung Mail
Others
Option 3: You can generate a one-time, unique password that will allow you to sign in to your account using your non-Yahoo email application. Once created, this password will continue to allow your app to securely sync your Yahoo email unless you sign out (or are signed out) from your app. You can find instructions on how to do this here.
If you want more details on these changes, please visit our help page. If you’ve already taken action, we’d like to think you haven’t read this far, but if you have . . . we sure appreciate the diligence!
ozsouth
Posts: 1359
Joined: Sun Jul 12, 2020 2:38 am
Location: S.E. Australia
Has thanked: 210 times
Been thanked: 602 times

Yahoo Mail - NOT A SCAM after all?

Post by ozsouth »

SEE BOTH REPLIES FROM YAHOO BELOW - SEEMS IS NOT A SCAM

FIRST 26/8/20 2.22pm AEST

Hello xxxx,

Thank you for being a Yahoo user. I appreciate your time and response to our last email, let me try to help you further.
I can determine it is a scam email and not being sent from Yahoo. Please do not click any link nor provide your information to that kind of email.
Scammers are always looking for ways to get personal info with malicious intent. Know how to recognize legitimate Yahoo websites, requests, and communications to keep your account secure. See how to Identify legitimate Yahoo websites, requests, and communication: https://help.yahoo.com/kb/SLN2070.html
Getting unwanted email isn't how you want to spend your day. Even though we investigate any violations of our Terms, we can't control spam messages sent using another mail system.
The best thing to do is to mark these emails as Spam if they appear in the Inbox. Doing so will help the system learn which emails are important and which ones should be sent to the Spam folder in the future.
Thank you again for contacting Yahoo Customer Care.

Regards,
Axxxxx
Yahoo! Customer Care, Verizon Media

THEN 26/8/20 3.43pm AEST

Hello xxxx,

Thank you for being a Yahoo user. I appreciate your time and response to our last email, let me try to help you further.
If the email you receive comes from an email address "info@comms.yahoo.net", that means it is a legit email from Yahoo.
By default, we block access to Yahoo Mail from outdated apps that could leave your account vulnerable. If we sent you an email indicating that your app is using outdated security protocols or you're unable to log in from an older app, you still have several options available to you.

Password errors and access issues

If you try to use Yahoo Mail in a third-party email client using less secure sign-in technology, you might get a "Server password has changed" or an "Authentication failed" error message. This is because those email apps use outdated security protocols and we've disabled access to them by default now.

Use a secure option to access Yahoo Mail

Don't worry! You have options to keep using your Yahoo Mail securely and without interruption:
Use the Yahoo Mail website: au.mail.yahoo.com/.
Install the Yahoo Mail app on your Android or iOS devices.
Use an app password.
Keep your current application, but follow the steps below to ensure it's syncing with our secure sign-in method. Please note, not all third-party email apps are supported.

Continue using third-party mail apps securely

Use an app password

If you use Yahoo two-step verification, Account Key or an older email app, you may need to use an app password to access Yahoo Mail. Just remember, this is not intended for permanent access and you'll want to download the Yahoo Mail app or follow the steps below for specific third-party applications.

Learn how to generate third-party app passwords.
More information on specific third-party platforms

If you prefer to continue accessing your Yahoo email on your current third-party email application, including the default email application on your mobile phone, please see details below on how to ensure it's syncing with the latest secure sign-in method.
Access mail via Apple iOS

Remove your Yahoo account and re-add it to the Apple email app on your mobile device. When you re-add the account, look for the Yahoo provider logo to trigger the secure sign-in method.
Access mail via Apple Mail on Mac OS

Remove your Yahoo account and re-add it to Apple Mail on Mac. When you re-add the account, look for the Yahoo provider logo to trigger the secure sign-in method.

Access mail via Gmail App on mobile

Remove your Yahoo account and re-add it to Gmail to trigger the secure sign-in method.

In the top right corner, tap the Profile icon.
Tap Manage Accounts to remove it.
Tap Add another account to re-add it.
Tap Yahoo to set it up again.

Read more from Google on removing and re-adding accounts.
Access mail via Outlook.com

Use an app password for initial sign in. Learn how to generate third-party app passwords.

Go to Settings in the upper right | select Account Settings.
At the bottom of the pane, select View all Outlook Settings.
Select Mail | Sync Mail.

Read more from Microsoft on how to connect accounts.
Access mail via Outlook Desktop

As of May 2020, Outlook Desktop does not yet support the Oauth2 secure sign-in method for Yahoo accounts. Yahoo members should generate and use a third-party app password to sign-in securely.
Access mail via Outlook for Mac

As of May 2020, Outlook for Mac does not yet support the Oauth2 secure sign-in method for Yahoo accounts. Yahoo members should generate and use a third-party app password to sign-in securely.

Access mail via Samsung Mail

Remove your Yahoo account and re-add it to the Samsung email app on your mobile device. When you re-add the account, look for the Yahoo logo to activate the secure sign-in method.

Open Android Settings.
Tap Accounts and backup | Accounts.
Remove existing email account then re-add.
Tap Add account | Email.
Tap the Yahoo logo to activate the secure sign-in method.

Read more from Samsung on removing and re-adding accounts.
Access mail via Thunderbird

Remove your Yahoo account and set it up again in the Thunderbird email client.

Go to Tools | Account Settings.
Select your account in the list.
Go to Account Actions at the bottom left.
Click Remove Accounts.
Click Add Accounts and type in the email address and password.
- Thunderbird will then automatically activate the secure sign-in method for your account.

Read more on removing and re-adding accounts in Thunderbird.
Access mail via Windows Mail

Remove your Yahoo account and re-add it to Windows Mail to activate the secure sign-in method.

From the navigation pane, click Settings.
Click Manage Accounts | select Add Account.
In "Choose an account," tap the Yahoo logo to activate the secure sign-in method.

Read more on removing and re-adding accounts in Windows Mail.
Access mail via Other Applications

If possible, use the Yahoo Mail app or mail.yahoo.com. Since Yahoo owns these services, we can ensure you're always using the most secure sign-in technology when accessing your email.
If you'd prefer to continue using your non-Yahoo email application, try removing and re-adding your account. Look for the Yahoo logo when you go to set it up again to activate the secure sign-in method.
If removing and re-adding your account does not work, generate a third-party app password to access your account.

Thank you again for contacting Yahoo Customer Care.

Regards,
Axxxxx
Yahoo! Customer Care, Verizon Media
Last edited by ozsouth on Wed Aug 26, 2020 1:13 pm, edited 7 times in total.
perdido

Re: Yahoo Mail - scam

Post by perdido »

Thanks for the update.

I just sprayed them with verizon-b-gone :0)
User avatar
8Geee
Posts: 376
Joined: Wed Jul 29, 2020 10:52 pm
Location: N.E. USA
Has thanked: 17 times
Been thanked: 54 times

Re: Yahoo Mail - scam OR NOT?

Post by 8Geee »

I said goodbye right after Verizon bought-out Yahoo... from frying pan into the fire.
Glad I did, it was already such a bad joke I had to block gmail accts due to spam.

Regards
8Geee

Money talks... no, it shouts, so that it doesn't have to hear common sense.

Doggy
Posts: 8
Joined: Thu Dec 02, 2021 7:00 pm
Been thanked: 1 time

Re: Yahoo Mail - scam OR NOT?

Post by Doggy »

I like Yahoo Mail. I have used it for some time now.

ozsouth
Posts: 1359
Joined: Sun Jul 12, 2020 2:38 am
Location: S.E. Australia
Has thanked: 210 times
Been thanked: 602 times

Re: Yahoo Mail - scam OR NOT?

Post by ozsouth »

@Doggy - I also still use it, after having the initial query answered by Yahoo.

Doggy
Posts: 8
Joined: Thu Dec 02, 2021 7:00 pm
Been thanked: 1 time

Re: Yahoo Mail - scam OR NOT?

Post by Doggy »

It's good that you are cautious with the emails you receive. Emails can easily trigger viruses or malfunctions of software that will damage your computer or, even worse, steal your data. You can verify the email to ensure it's not a scam in this situation. I have the same routine whenever I receive a strange-looking email. I use platforms like verif. email to check the email. I suggest you to do the same.

Post Reply

Return to “Security”