All the latest UK technology news, reviews and analysis


Yahoo found serving Java malware-spreading ads

06 Jan 2014
malware virus security

Hundreds of thousands of Yahoo users in European countries including the UK, France and Romania may have been infected with malware injected into advertising hosted on Yahoo websites.

Dutch company Fox-IT made the discovery at the end of last week, saying users who visited Yahoo would be confronted with advertisements that would direct them to external sites hosting malware that exploits Java security flaws.

The ads were served in iframes by Yahoo's advertising service, and were hosted on external sites. Upon clicking the advertisements, users would be redirected to a selection of other domains, all reporting the same Netherlands-based IP address.

The malware users were faced with include money-grabbing Zeus Trojan, botnet software Andromeda and other malware associated with advertising.

Fox-IT estimates that the traffic to the malware hosts was around 300,000 visits per hour. On the assumption that nine percent of those users would ultimately be infected, the firm says around 27,000 infections could have occurred every hour over the four days the adverts were present.

Yahoo confirmed the news in a statement shared with V3: "From 31 December to 3 January on our European sites, we served some advertisements that did not meet our editorial guidelines – specifically, they spread malware. On January 3, we removed these advertisements from our European sites."

The statement added that users in other regions and those using Apple's Mac OS and mobile devices were not affected. "We will continue to monitor and block any advertisements being used for this activity. We will post more information for our users shortly."

The attack bore a resemblance to the one carried out on the PHP.net website, Fox-IT said. In recent months, popular services including Dropbox and Microsoft Silverlight have found themselves under attack, highlighting the risk businesses face when allowing employees to use personal service on their work devices, or allowing them to bring personal devices into work.

  • Comment  
  • Tweet  
  • Google plus  
  • Facebook  
  • LinkedIn  
  • Stumble Upon  
Michael Passingham
About

Michael Passingham joined V3 as a reporter in June 2013. Prior to working at V3, Michael spent time at computing magazine PC Pro. Michael covers IT skills, social media, tech startups and also produces V3's video content.

View Michael's Google+ profile

More on Security
What do you think?
blog comments powered by Disqus
Related jobs
Poll

IT curriculum poll

With coding now compulsory in schools, how important are digital skills for the next generation of school leavers?
63%
8%
20%
9%

Popular Threads

Powered by Disqus
V3 Security Summit

V3 Security Summit Day 2: Botnet, skills and BYOD intelligence incoming

Keep V3 bookmarked for news updates on all the key security concerns and topics facing businesses

Updating your subscription status Loading
Newsletters

Get the latest news (daily or weekly) direct to your inbox with V3 newsletters.

newsletter sign-up button
hpv3may

Getting started with virtualisation

Virtualisation can help you reduce costs, improve application availability, and simplify IT
management. However, getting started can be challenging

ibmv3may

Converting big data and analytics insights into results

Successful leaders are infusing analytics throughout their organisations to drive smarter decisions, enable faster actions and optimise outcomes

UI Developer

UI Developer Founded in 1861, Royal London is the...

PHP Developer - ECommerce / MVC / OOP / Linux - Huddersfield

PHP Developer - ECommerce / MVC / OOP / Linux - Huddersfield...

SAP Delivery Manager

SAP Delivery Manager - Middlesex - ASAP Start SAP...

EUC Infrastructure Service Manager

Infrastructure Service Manager - End User Computing...
To send to more than one email address, simply separate each address with a comma.