“Sign-in Attempt Was Blocked” Email Scam

Cybersecurity is increasingly crucial in today’s digital world, where phishing and scam campaigns target unsuspecting users. One such campaign involves the “Sign-in Attempt Was Blocked” email scam. This fraudulent email claims to alert recipients about a blocked sign-in attempt to their account. In reality, it is a phishing attempt aimed at stealing sensitive login credentials.

---

Threat Overview

Below is a summary of the “Sign-in Attempt Was Blocked” phishing email campaign:

Attribute	Details
Threat Type	Phishing, Scam, Social Engineering, Fraud
Fake Claim	Recipient must review a blocked sign-in attempt to their email account.
Associated Domains	restoredfaith[.]org
Detection Names	Combo Cleaner (Phishing), Fortinet (Phishing), G-Data (Phishing), Lionic (Phishing), VIPRE (Phishing)
Serving IP Address	108.167.142.88
Symptoms	Unauthorized online purchases, changed online account passwords, identity theft, illegal access to the computer.
Distribution Methods	Deceptive emails, rogue online pop-up ads, search engine poisoning techniques, misspelled domains.
Damage	Loss of sensitive private information, monetary loss, identity theft.
Danger Level	High

---

How the Scam Works

1. Email Appearance: The phishing email uses the subject "Critical security alert" or similar variations to draw attention. It warns the recipient of a blocked sign-in attempt using their password.
2. Urgency and Deception: It urges the recipient to check the suspicious activity by clicking a link. This link leads to a fraudulent webpage disguised as a legitimate sign-in page, often using logos like Zoho Office Suite.
3. Credential Theft: When victims enter their credentials, the data is immediately sent to the scammers. This provides them access to sensitive accounts, which can be exploited in numerous ways.

---

Symptoms of Infection

• Unauthorized Activities: Suspicious online purchases or transactions.
• Compromised Accounts: Changed email or social media passwords without your consent.
• Identity Theft: Scammers impersonating you to solicit money or information from your contacts.
• Data Loss: Sensitive personal or business information stolen or misused.

---

Consequences of Falling for the Scam

• Privacy Breach: Access to personal or business-related emails can expose sensitive data.
• Monetary Loss: Stolen credentials of financial accounts can lead to unauthorized transactions.
• Malware Spread: The compromised accounts can distribute malicious links or files.
• Reputation Damage: Scammers can impersonate victims to defraud others, damaging personal or professional reputation.

---

How to Remove and Recover?

If you suspect that you have been compromised by the "Sign-in Attempt Was Blocked" email scam, follow these steps:

Step 1: Change All Compromised Passwords

1. Immediately update the password of the email account targeted by the scam.
2. Use unique, strong passwords for all accounts. Consider using a password manager for security.

Step 2: Enable Two-Factor Authentication (2FA)

Add an extra layer of security by enabling 2FA for all critical accounts, including email, banking, and social media platforms.

Step 3: Scan Your System with SpyHunter

SpyHunter is an advanced anti-malware tool designed to detect and remove phishing-related threats. Follow these steps:

1. Download and install SpyHunter.
2. Perform a full system scan to detect any malware or phishing-related files.
3. Follow the on-screen instructions to quarantine and remove detected threats.

Step 4: Notify Relevant Authorities

• Report the phishing attempt to your email provider.
• If financial data was compromised, contact your bank immediately to prevent unauthorized transactions.

Step 5: Monitor Your Accounts

Regularly review your financial and online accounts for any suspicious activities.

---

Preventive Measures

To safeguard yourself against future phishing attempts, follow these best practices:

Be Skeptical of Unexpected Emails

• Avoid clicking on links or downloading attachments in unsolicited emails.
• Double-check the sender’s email address for inconsistencies or typos.

Use a Reputable Anti-Malware Tool

SpyHunter can proactively detect and block phishing threats, ensuring your system stays safe.

Check Website URLs

Verify the website’s URL before entering any login credentials. Look for HTTPS and ensure the domain name is correct.

Educate Yourself and Others

Stay informed about the latest phishing tactics and educate friends, family, or colleagues about such scams.

Regular Backups

Maintain regular backups of essential data to avoid potential data loss.

Text Presented in the Body of the "Sign-in Attempt Was Blocked" Scam

Subject: Critical security alert

Sign-in attempt was blocked

********

Someone just used your password to try to sign in to your account.

******** blocked them, but you should check what happened.

CHECK ACTIVITY

You can also see security activity at

-

You received this email to let you know about important changes to your ******** Account and services.

© 2025 ******** LLC