All the latest UK technology news, reviews and analysis

Yamanner worm targets Yahoo Mail users

by Tom Sanders in California

13 Jun 2006

Be the first to comment

  • Tweet this
Yahoo has repaired a vulnerability in its Yahoo Mail service that allowed a worm to harvest email addresses from user accounts
JS/Yamanner used JavaScript to exploit a flaw in Yahoo Mail

Yahoo has repaired a vulnerability in its Yahoo Mail service that allowed a worm to harvest email addresses from user accounts and further spread itself.

The JS/Yamanner worm automatically executes when a user opens the message in the Yahoo Mail service. 

JS/Yamanner uses JavaScript to exploit a flaw that was unpatched until today. Yahoo fixed the vulnerability late on Monday.

"We have taken steps to resolve the issue and protect our users from further attacks by this worm. The solution has been automatically distributed to all Yahoo Mail customers, and requires no additional action on the part of the user, " said Yahoo spokeswoman Kelley Podboy in a statement.

JS/Yamanner was sent to addresses in the yahoo.com and yahoogroups.com domains. It appears to be sent from av3@yahoo.com and has 'New Graphic Site' as its subject.

The worm was probably attempting to harvest email addresses for spam purposes.

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

IT priorities for 2012

What is the most important IT priority for your company this year?

99%

0%

1%

0%

0%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Accurev

Top 5 software development challenges

This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes

Talend

Rubbish in, rubbish enterprise

Why good data management at all levels is essential in the modern business (video, 6mins)

Cisco Voice Support (IPT, Unified Communications)

Cisco Voice Support (IPT, Unified Communications) Cisco...

Financial Business Analyst - Berkshire - £55K

Business Analyst - Finance, Retail Banking/Core Banking...

Senior C# Developer

Senior C# Developer Senior C# Developer required for...

.NET Developer -Leeds - £25-30K+bens

GREYWOOD ASSOCIATES are currently recruiting for an experienced...

To send to more than one email address, simply separate each address with a comma.