Yahoo Phishing Scam: Real Enough to Catch You

This morning I got taken by a phishing scam--an attempt to harvest your ID and password for a service, in this case Yahoo. I've been on the Internet a long time, and I'm a professional, so for me to get taken it was fairly clever. And I was still sleepy. Anyway that's my story and I'm sticking to it.

Full details at my RL site:

http://www.thenewhomemaker.com/node/70007

If you have a Yahoo account or if you have friends with Yahoo accounts, pass it around. This has been going on for at least a week and I don't think anyone's caught on yet. I reported it to Yahoo.

Ooo! Ooo! I'm excited about your rl site! I will check it out later. (And yes, that did look real as all get-out.)

coco

I'm sorry to say these are a dime a dozen. Every so often I hear someone taken by a trick like this. Not everyone is aware enough to catch the url or the fact that it's a user page.

1) I got the URL from my husband's Yahoo account via Yahoo IM. Trusted user, not a stranger or an email pretending to be from Yahoo or a bank or something

2) Yahoo owns Geocities. It's plausible--not likely on further reflection--but plausible that for some reason Yahoo may have put up a secondary portal at the Geocities address. The Geocities account was named look_at_me_now_2006. Sounded like a promotion of some kind.

I know. That's how these work these days. They compromise then spread through buddy lists.
It's a freaking shame. I usually don't click one-line "Check this out" links. But I was trained int stuff like this before.

So yeah. Start a chain IM, say they'll be cursed and phucked if they don't resend it