Security Advisory – Yahoo! Xtra Phishing Scam Emails

The Yahoo! Xtra email service has been widely reported to have been targeted over recent days by malicious attacks which are believed to have compromised the Yahoo! Xtra email accounts of some users.

Users of this service have reported receiving emails purportedly from people they know containing links to a suspicious website. If the link is clicked, then similar emails are then sent to certain contacts on their address list. Users have also reported compromises to their own email accounts suggesting emails had been sent from those accounts without the users’ knowledge.

As a precaution, if you have received a suspicious email of this nature, NCSC strongly advises that you do not click the link. Telecom has also issued an advisory which recommends Yahoo! Xtra email users reset their email passwords via their  password reset page(external link). The full advisory can be viewed here(external link).