: Avoid opening or downloading any unexpected attachments. Yahoo's official security notices state they will never ask you to download an attachment to resolve an account issue.
: Some users report receiving .txt files in emails that claim the sender has personal information or "proof" of activity to extort money (often via Bitcoin). Safety Recommendations
: Although .txt files are generally safe plain-text documents, attackers often use "double extensions" (e.g., hq_yahoo.txt.exe ) to hide malicious executable code.