Received multiple Unrequested Yahoo verification codes..In Different Languages??

Topic

New Reply

[rick41]

Tonight, at about 9pm, 10pm and 10:20pm, one of my Yahoo accounts received three (and counting?) emails like the following:

“From: Yahoo [mailto:no-reply@cc.yahoo.com]
Sent: Tuesday, November 19, 2024 11:15 PM
To: ME@yahoo.com
Subject: Your Yahoo verification code is ######.

Hi,
ME@yahoo.com

Are you trying to sign in?

If so, use this code to finish signing in.

##### [different code in each email]

This sign in attempt was made on:

Device
chrome mobile, android [fyi, I don’t have an android mobile]

When
[Date & Time]

Where
Ethiopia
[i.p. address]

Didn’t sign in recently?

Review your account activity and remove the devices and apps that you don’t recognize.

https://login.yahoo.com/account/activity

Thanks,
Yahoo”

———–

These all listed the same i.p. address and Ethiopia. I am in the US.

Now, I already had some ideas about what kinds of things might be resulting in this — mostly hacking methods. And the Reddit link listed at the end of this post listed additional possibilities.

But here’s what actually perplexes me most: While the first two emails were in English, the third was in Chinese (it translates to the same message). Again, these all listed the same “Ethiopia” i.p. address. And my account is set up to use English.

Any ideas how the third notification could be in a different language, if it was initiated with the same method (and presumably by the same person or bot)?

https://www.reddit.com/r/AskNetsec/comments/e4nqok/i_keep_getting_your_yahoo_verification_code_is/

• This topic was modified 5 months, 1 week ago by rick41.
• This topic was modified 5 months, 1 week ago by rick41.
• This topic was modified 5 months, 1 week ago by rick41.
• This topic was modified 5 months, 1 week ago by rick41.
• This topic was modified 5 months, 1 week ago by rick41.

Reply | Quote

Replies

This appears to have be around awhile:

https://www.makeuseof.com/yahoo-mail-phishing-scam/

Desktop Asus TUF X299 Mark 1, CPU: Intel Core i7-7820X Skylake-X 8-Core 3.6 GHz, RAM: 32GB, GPU: Nvidia GTX 1050 Ti 4GB. Display: Four 27" 1080p screens 2 over 2 quad.

Reply | Quote

Thanks for the reply, but that link does not appear to describe my situation at all.  The possibilities described in the Reddit link seem much more aligned with what I am experiencing, except that I don’t see variation in language mentioned there.  That issue is  the primary reason I posted here, although any comments are welcomed.

1 user thanked author for this post.

TechTango

Reply | Quote

As mentioned in the Reddit thread, it’s possible that someone was trying to reset your password. My guess about the different languages is probably what local Yahoo site they attempted the login from.

I had one a few years ago with my Google account. It previously was used for Gmail but I deactivated that in favour of an Outlook.com account. I was getting a lot of Indonesian spam to the Gmail before deactivating it, but you can never fully delete the Gmail and it’s always tied to the Google account even if you change the primary address. Then someone in Indonesia tried to reset my Google account password by using the deactivated Gmail address, after which I deleted the entire Google account and set up a new one with my Outlook.com account.

1 user thanked author for this post.

rick41

Reply | Quote

steeviebops wrote:

As mentioned in the Reddit thread, it’s possible that someone was trying to reset your password. My guess about the different languages is probably what local Yahoo site they attempted the login from. I had one a few years ago with my Google account.

Thanks.  How frequently, if ever, was your Google account receiving Google account login codes that you didn’t request?  E.g.,  was that a one time series of emails like I have had (so far?), or did it become a regular/frequent occurrence?  If the latter, do you recall about how how long it persisted?  Not asking about the Indonesian spam in general, but specifically about unrequested account login codes (presumably Inodenesian as well).

Reply | Quote

rick41 wrote:

steeviebops wrote:

As mentioned in the Reddit thread, it’s possible that someone was trying to reset your password. My guess about the different languages is probably what local Yahoo site they attempted the login from. I had one a few years ago with my Google account.

Thanks.  How frequently, if ever, was your Google account receiving Google account login codes that you didn’t request?  E.g.,  was that a one time series of emails like I have had (so far?), or did it become a regular/frequent occurrence?  If the latter, do you recall about how how long it persisted?  Not asking about the Indonesian spam in general, but specifically about unrequested account login codes (presumably Inodenesian as well).

It happened twice. On the first occasion, I got a message in Indonesian, but the links all looked legitimate so I don’t think it was phishing. On the second one, I got a text to my phone with a Google verification code. That was when I changed the password on the account, but decided shortly after to just delete it entirely and set up the new one linked to my Outlook.com address.

1 user thanked author for this post.

rick41

Reply | Quote