Yahoo Gets a Handle on Yamanner

Status
Not open for further replies.

radarhunter

Contributor
Yahoo (Nasdaq: YHOO) Latest News about Yahoo said it has contained a malicious program aimed at the millions of people who use its e-mail service, which ranks as the world's largest.

The worm, dubbed "Yamanner," infected a recipient's computer as soon as the toxic e-mail was opened. It then scanned contact lists for additional targets, according to security software maker Symantec (Nasdaq: SYMC) Latest News about Symantec.
Thwarting Attacks

Sunnyvale, Calif.-based Yahoo said "a very small fraction" of its more than 200 million e-mail accounts were infected Monday when the problem was first identified. The worm didn't affect the next version of Yahoo's e-mail service, which remains in its test, or "beta," phase.

"We have taken steps to resolve the issue and protect our users from further attacks of this worm," Yahoo spokesperson Kelley Podboy said. "The solution has been automatically distributed to all Yahoo Mail customers, and requires no additional action on the part of the user."

As a precaution against variations on the Yamanner worm, Yahoo advised its e-mail users to update their antivirus programs and block all incoming correspondence from av3@yahoo.com.
Burrowing In

The worm arrived in the form of an e-mail containing JavaScript and contains the words "New Graphic Site" in the subject field, according to Symantec, the maker of Norton antivirus software.

Unlike many worms that require an attachment to be opened, the latest bug was unleashed as soon as the e-mail was opened. It burrowed into e-mail contact lists in search of addresses containing the domains yahoo.com and yahoogroups.com, according to Symantec.
 
  • Like
Reactions: 1 person
radar is telling the truth. I have read about it also. It might be using the activeX or dhtml capabilities of the client. Most probably targeted at Outlook or Outlook Express mail clients. They haven't given too many details which is understandable with the nature of service they provide.
 
Status
Not open for further replies.