'Your Password Has Been Changed' Email Scam Uses Improbable Lure

A new scam is being distributed online using malicious spam emails. This new attempt is aimed at harvesting victim credentials, as is the case with most similar scams.

The scam is delivered in a very bland, very low-effort email that attempts to persuade the victim that they requested a password change, which obviously never happened. The full text of the scam email is as follows:

Subject: Password changed

Your password has been changed.

Keep Current Password

Your password has been changed, as you asked.

If you didn’t ask to change your password, we’re here to help keep your account secure. Visit our support page for more info.

Regardless of whether the victim clicks "Keep Current Password" or the fake support link in the last line of the email, they are taken to the same phishing page that is set up to harvest and steal any information and login credentials that the victim enters on it.

Remember that unsolicited emails claiming outlandish things are always sources of danger and delete them immediately when they show up in your inbox.