• New Worm Targets Yahoo! Mail

    New Worm Targets Yahoo! Mail

    Techtree News Staff, Jun 13, 2006 1050 hrs IST

    A new worm, dubbed the "Yamanner worm" that exploits a Javascript vulnerability in Yahoo! Mail, has been detected by Yahoo!

    mail share

A new worm, dubbed the "Yamanner worm" that exploits a Javascript vulnerability in Yahoo! Mail, has been detected by Yahoo!

Yahoo! said a very small fraction of its base of over 200 million accounts is infected by the worm. While security firms such as Trend Micro and McAfee rated the virus as having a low threat level, Symantec called it an "elevated threat".

In its advisory, Symantec said that the Yamanner worm targets all versions of Yahoo! Web-based mail except the latest beta version, and that Yahoo! Mail users might be able to protect themselves by upgrading to the latest test version of Yahoo! Mail.

While there was no patch for the Javascript flaw at the time of Symantec's advisory, Yahoo! later said it had come up with a fix for the hole.

A spokesperson for Yahoo! said that the company has taken steps to resolve the issue, to protect users from further attacks of the worm. The spokesperson said that the solution had been automatically distributed to all Yahoo! Mail customers, and that no additional action on the part of users was now required.

The Yamanner worm landed in Yahoo! mailboxes, bearing the subject header "New Graphic Site". Once the message was opened, the computer became infected, and the worm spread itself to other users on the Yahoo! email contact list. Apparently, the harvested email addresses were also sent to a remote online server.

Experts at Symantec are of the view that the worm has selected a pretty novel approach, in that it takes advantage of a JavaScript vulnerability so that the user does not even have to click on an attachment to get infected.

As per Symantec's advisory, systems affected by Yamanner include Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, and Windows XP.

Follow Techtree on Twitter

Related Links
Yahoo Opens Up to Third-party Apps
Four Entry-level phones from Intex
Yahoo! Mash: Rest in Peace
Tag keywords
worm Yamanner worm Javascript vulnerability in Yahoo Mail Symantec



Discussion Board
(31) Comments
Itumeleng
,Pretoria, on Nov 09, 2008 02:42 PM
Help me to enable javascript please.
Report abuse
kumara aarup
,haderslev danmark, on Jun 14, 2006 04:27 AM
my interest in what goes on in the united states is very low, the interest grows when i am present. the issues you have regarding girlfriend or boyfriend, is of no concern to me, the focus is clear. the news and the focus at all times, is the hospital in danmark, there is nothing more important, than what danish radio broadcast in copenhagen, the lies america puts through in the media, have no interest to me. we only focus on the truth, at the time the news was being broadcast. i was hit by loss of memory and the only thing i knew to focus on before this event, is music. so all i can do is tell you a little about music, and give you perhaps a few fragmenst of remixes i have been fooling around with. but the answers regarding the question sheed about the hospital, is simple and clear, i do not wish to say something i do not know anything about. as i know, there will be more than five millions listners when i am being broadcast through out the nation. this is expected, when people hear my name, they wish to listen to the show, once again. its always like that. whats not very funny is the hospital event, so the answer is straight, since i dont know. No! but for those who heard, go figure. the memory is slightly comming back, slowly. back then i didnt know what dopamin was, had i know i would have mentioned it as well. today im aware of a little bit about dopamin, also i am aware that it was removed at the hospital. then question is how? so what goes on in the united states, or what went on in the united states, now then or before. has no interest to me. it doesnt concern me at all. the past has no interest to me, we have no time, we must focus on recovery and pharmacology. can we cure mutlple sceleroses? its no good to keep being frustrated about who is right and who is wrong, regarding weather this has happend at a hospital or not, when it has. there is no way you loose your milk enzyme or dopamin from your brain, or getting mutlple sceleroses by playing soccer. this whole thing at the hospital is a big manupulation directed towards one person, by more than 10 against one. its very easy to get the picture of what goes on. perhaps they have cleaned everything, as i noticed the flours being cleaned all the time. likewise, then again you havent seen nothing yet. well the focus is not to whom to blame for such an ivent, the focus is the future of getting well again. will a blow job cure a broken leg? well perhaps in another world. sometimes i tend to think that were in another world. its such a shame were worlds appart, because of this event.
Report abuse
Zombie
,Zombie, on Jun 14, 2006 09:40 AM
What the hell? Who care about what do u feel , think? This is not weblog, stop bugging.
Report abuse
Grawp
,The Dark Forest, on Jun 14, 2006 01:01 PM
So kumara aarup, when are you publishing this autobiography?
Report abuse
Anonymous
,Montreal, on Jun 14, 2006 05:23 PM
Umm,,, I'm sorry I feel asleep after the third line,,, could you condense your babble a little, and make it more interesting?
Report abuse
NutKhat
,Panchkula 134112, on Jun 16, 2006 01:29 PM
Discovery of an Indian!! by Shakespeare!
Report abuse
Kumara
,vojens, on Jun 28, 2006 04:02 AM
So life on the farm so far has been really great, nothing really has happend yet. My sick auntie is suffering from lounge canser, and i dont know what to do about it. i really hope they will find a cure for cancer as i really dont want to loose my auntie. i havent talked much to my family except on the phone, theyre away on vacation right now. while me and my sister is looking out and taking care of the animals on the farm. my sister has been milking the cows, and i have been dooing some things on the fields. we really need to get all this done by the time our parrants return from theire vacation. my sister is very upset as she doesnt wish to live in austin for the rest of her life, and i dont know how i can try and make her understand that, the family is going to be depedent on her as i need to go away to another country some time later in the future. She just wish that she could go too. She never really liked the idea of taking care of a ranch. i kinda like the farm and the animals from Sarah, With love
Report abuse
Kumara Aarup
,Vojens, on Jun 29, 2006 03:07 PM
Well, you have and idea of the stuff we do Basicly the extreme area of ponografy at the broadcast station during night time. every night after midnight, the sessions are happning in the restrooms, people gather together. the heat in the studios are creating such a tremendous vibration in the entire body. the blood streams into the penis, and the humans becomes very horny. the sperm are being drained down the toilet. every one, that experience the heat in the studios after a 45 min broadcast session, are most likely heated up. sometimes the toilet sessions are recorded. Humans jerk off, when it gets really dirty, they even eat their own sperm. some enjoy, some dont. by: c.k Abc news
Report abuse
Anonymous
,sydney, on Jan 09, 2008 06:24 PM
we'll change the planet is all urs
Report abuse
Deobratt
,Bhilai, on Oct 06, 2006 10:27 AM
I m not able to open my mails ,last 2 days back "New Graphic Site" i did got this in my mail box
Report abuse
robert stroup
,Sausalito, ca, on Oct 02, 2006 02:08 AM
the beta software has screwedup my yahoo mail, how do I remove the beta software from computer?
Report abuse
Nisa
,India, on Jul 20, 2006 10:19 AM
Even after giving correct id & pwd iam not able to login to the account. Pl help. Is there any helpline available
Report abuse
Kumara
,san francisco, on Jun 28, 2006 04:08 AM
well actually the biography is being published every five years in copenhagen scandinavia, through out the entire world, the last program was broadcast four times. i'll publish that to the world wide web sometime, but there is alot actually bio of the past ten fifteen years
Report abuse
Zahirul Hoque
,Brisbane, Australia, on Jun 16, 2006 06:11 PM
i cant log in my yahoo account. I know my yahoo id and passwird is correct hoever it says in correct password. I can remmeber i opened the worm email. How can i get access to my yahoo account
Report abuse
crabbage
,Penn Yann, on Jun 14, 2006 10:13 PM
The comments are not from the real Kumara Aarup. He is way too famous and his English, I believe is better that what has been written. I think these diatribes have been written by a poser. That, or a random word/sentence generator that has malfunctioned.
Report abuse
Andrew Talesian
,Australia, on Jun 15, 2006 05:17 AM
I disagree that the posting made below, apparently by Kumara Aarup, was made by a random sentence generator - the text is to coherent, and at the same time too incoherent. It would take a pretty advanced piece of software to generate sentences that flow like those in the posting; but the subject focus wanders too much and there is no logical connection between each point. In short, I think it is probably someone, possibly under the influence of some medicine/drug, basically rambling on.
Report abuse
Grawp
,The Dark Forest, on Jun 15, 2006 04:21 PM
Andrew, You read the whole message of Kumara Arup? That needs a lot of courage!!! :-D
Report abuse
Jim M
,Chicago, on Jun 14, 2006 03:49 AM
Darn! We Mac users miss out on another virus!
Report abuse
kumara aarup
,haderslev danmark, on Jun 14, 2006 04:46 AM
Well virus is one thing, a virus is bit of software, that you can remove from the machine, and continue working. but hardware is whole diffrent issue, what can you really do if youre behind the issues of kgo810s hardware and chip codex which is impossible to get through, if you have a virus you could get some antivirus software and remove. but if your uplink is made through 810, then there is nothing to do i guess. why would it say 810 on the hardware, had it been the software, it would be as easy as that to remove. but like memory, its hardware, you can expand your memory with software!
Report abuse
Chris McCaw
,London, Ontario, Canada, on Jun 15, 2006 10:46 AM
Ah, another sanctimonious Macophile. *tsk*
Report abuse
Andy the Chicke
,Ottawa, Canada, on Jun 15, 2006 09:16 AM
Surely, if it's web based mail, it depends on which browser you're using. The javascript in Firefox, for example, should be immune, no?
Report abuse
swapna sarit si
,mumbai, on Jun 14, 2006 05:50 PM
WELL ven itz going 2 strike yahoo.will it stkike the mail ids of yahoo.
Report abuse
Tommy
,NY, on Jun 14, 2006 11:41 AM
Good joke...but cant laugh.. Save your stories for your children
Report abuse
yuck foo
,univer, on Jun 14, 2006 09:33 AM
[this is a lie. it is not the truth. we all know it. even you know it. we love you but we're not going to eat your filth anymore. we can tell you're terrified. you do it to yourself. good luck and all our love, the winners]
Report abuse
yuck foo
,univer, on Jun 14, 2006 09:28 AM
[this is a lie. it is not the truth. we all know it. even you know it. we love you but we're not going to eat your filth anymore. we can tell you're terrified. you do it to yourself. good luck and all our love, the winners]
Report abuse
Bill
,New York, on Jun 14, 2006 02:02 AM
Sounds like a good time to upgrade... Get Google's GMail. Never have had a problem with this and has better features than Yahoo.
Report abuse
kumara aarup
,haderslev danmark, on Jun 14, 2006 05:00 AM
Well its true gmail is great, i dont know much about it. the way it looks, and the way its set up, looks great. its pretty cool for people without an internet email account. this new concept of part of the gmail structure, i think, is very old though. but for people who has never had an account before with internet providers this is brand new, its true. and its great. but weather its better than yahoo i really dont know, they have also lounched i noticed, i havent been follwing much about all this new developments of free email accounts. but either way, there is no way, you can beat yahoo chat forrums. i doubt it, then you would need to merge, there is many americans that has yahoo, not for mail purpose but for discussion, i would know my self. its set up at the news station as well. its very easy to sit behind the control system, and send a message to the woman behind the screen of the television show. you couls say, where you think youre goin boi! im going to the bathroom, or to the gym. or you can say camera one zoom in, then she proberly reply with a message, but boss ive already zoomed in. and then boss replies well zoom out then.
Report abuse
Jim
,Orlando, on Jun 14, 2006 02:56 AM
Bill Gates will have a fix for $29.99 in a few weeks - not to worry.
Report abuse
kumara aarup
,haderslev danmark, on Jun 14, 2006 04:51 AM
well bill gates has a fix for everything, im sure he has. im sure he is great at what he does, this no critic neither is a compliment, just a coment. Also you would wonder why bill gates has invested 11 billion dollars in a company in copenhagen called navision, for the purpose of getting into the danish market of information technolgy? well this is years ago, still there no jobs in the industry yet, then you could maybee think that the it industry in the headquartors has decresed, and they moved into another country, as they did test out the very first "multitasking software in danmark, before the release in the united states, i think. maybee this is why they have bought the company in copenhagen, so they can develop a new software soulution for buisnesses, maybee this souloution will cost 29.99 dollars. i dont know!
Report abuse
mary tarnish
,davenport, on Jun 14, 2006 01:57 AM
help i cannot get my e-mail
Report abuse
kumara aarup
,haderslev danmark, on Jun 14, 2006 04:40 AM
if you cannot get your email you should tjek your internet connection. it also depends in what country you are, and weather they provide an uplink. it could be that youre behind a firewall from your internet provider, preventing you from getting the messages that you want, or aer recieving. you could try and trace it all back to where the internet was invented, i know that the internet was an invention by the us goverment back days, one would assume they should have full control over the internet, even though you live in another country, if the internet is us. would you think the goverment is trying to prevent you from getting your emails? or do you think maybee your internet provider is keeping you behind a firewall, if that is so. then i guess where the internet has been invented, i guess the government has no such control over what they have invented. But im sure they do have full control over the internet, they must be xperts in the field, perhaps they dont want you to get your emails or messages for some reason, i guess you'll never know why. well i dont know much about the internet, but i thought i would reply and just make a coment anyways. You might not get your messages now, but most likely you will later down that long winding road.
Report abuse

Opinion Poll