Democratic Underground Latest Greatest Lobby Journals Search Options Help Login
Google

Did anyone here get hit by the Yahoo worm?

Printer-friendly format Printer-friendly format
Printer-friendly format Email this thread to a friend
Printer-friendly format Bookmark this thread
This topic is archived.
Home » Discuss » Archives » General Discussion (01/01/06 through 01/22/2007) Donate to DU
 
BlueStorm Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jun-13-06 01:29 PM
Original message
Did anyone here get hit by the Yahoo worm?
I did and now I got banned from a Yahoogroup because of it. Anyways there is an article on their site about it, I'd link it but I am at the library right now and their system doesn't allow me to right click to cut and paste.

Man I am telling you, it's something. They are recommending to upgrade your mail service and also to change the settings in your e-mail to read messages at the groups' site rather than recieve e-mails.

It has something to do with a vulnerability in their system.

Blue
Printer Friendly | Permalink |  | Top
RobertSeattle Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jun-13-06 01:33 PM
Response to Original message
1. Is Yahoo Worm the new nickname for Bush?
:evilgrin:
Printer Friendly | Permalink |  | Top
 
BlueStorm Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jun-13-06 01:35 PM
Response to Reply #1
3. LOL!!!
No it's an actual worm and it takes your e-mail address and then sends it out to everyone on your list and yahoo groups.

It fucked everything up for me. Like I said I was banned from VodouSpirit@yahoogroups.com

It was targeting any e-mail with yahoo.com or yahoogroups.com

blue
Printer Friendly | Permalink |  | Top
 
Notoverit Donating Member (302 posts) Send PM | Profile | Ignore Tue Jun-13-06 01:34 PM
Response to Original message
2. My server announced me it quarantined a message. Ironically, one that was
announcing the worm. My yahoo mail pretty much ceassed - I usually get plenty.
Printer Friendly | Permalink |  | Top
 
BlueStorm Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jun-13-06 01:36 PM
Response to Reply #2
4. I didn't get the quaratine message but I am wondering
if my dad upgraded his Norton software if it would detect it from a Yahoo message.

Blue
Printer Friendly | Permalink |  | Top
 
displacedtexan Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jun-13-06 01:37 PM
Response to Original message
5. Nope. Yahoo patched it internally.
Security companies have released antivirus definitions that protect against Yamanner. But, according to Hogan, the sharp decline in virus activity is because Yahoo itself has now patched its central servers.

"They have blocked this hole, by making a slight change that ensures the script won't run," said Hogan.

Yamanner takes advantage of a JavaScript flaw which allows scripts that are embedded in HTML emails to execute in the user's Web browser.

Yamanner arrives in a Yahoo mailbox bearing the subject header "New Graphic Site". Once the message is opened, the computer becomes infected and the worm spreads itself to people on the Yahoo email contact list. The harvested email addresses are also sent to a remote online server. More...
Printer Friendly | Permalink |  | Top
 
BlueStorm Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jun-13-06 01:40 PM
Response to Reply #5
8. "Harvested e-mail address are also sent to a remote online server"
Could this be an identity theft thing as well?

God I hope not, not that I have anything important online.

Blue
Printer Friendly | Permalink |  | Top
 
Boredtodeath Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jun-13-06 01:38 PM
Response to Original message
6. Link?
Or some more info?

There were many strange things going on with my yahoo account this morning.

I've heard nothing about this.

Printer Friendly | Permalink |  | Top
 
BlueStorm Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jun-13-06 01:42 PM
Response to Reply #6
11. Go to www.yahoo.com
it's on their front page. If not just google "Yamanner worm"

I can't link because the library won't allow me to.

BLue
Printer Friendly | Permalink |  | Top
 
progressivebydesign Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jun-13-06 01:39 PM
Response to Original message
7. It came thru one of my yahoo groups..
and I opened it.. before they had warnings about it. I don't think it infected me, as it had things removed from it by the time it reached me. I wish assholes who think these things up would actually use their apparent computer talents to get a freakin' real job. No one is impressed with the virus.. for all of the time they spend cooking these things up they could actually start a legit biz and get to leave the house occasionally.
Printer Friendly | Permalink |  | Top
 
BlueStorm Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jun-13-06 01:41 PM
Response to Reply #7
9. Yeah they could actually make money doing stuff like this...
Security companies pay big bucks for people like this to strenghten their software.

Blue
Printer Friendly | Permalink |  | Top
 
im10ashus Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jun-13-06 01:41 PM
Response to Original message
10. A copy and paste shortcut.
Highlight the text and hit CTRL+C for copy and CTRL+V for paste.

:hi:
Printer Friendly | Permalink |  | Top
 
BlueStorm Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jun-13-06 01:47 PM
Response to Original message
12. Yahoo worm is now contained
Edited on Tue Jun-13-06 01:49 PM by BlueStorm
SUNNYVALE, Calif. - Yahoo Inc. (Nasdaq:YHOO - news) said Tuesday it has contained a malicious program aimed at the millions of people who use its e-mail service, which ranks as the world's largest.

ADVERTISEMENT

The worm, dubbed "Yamanner," infected a recipient's computer as soon as the toxic e-mail was opened. It then scanned contact lists for additional targets, according to security software maker Symantec Corp.

Sunnyvale, Calif.-based Yahoo said "a very small fraction" of its more than 200 million e-mail accounts were infected Monday when the problem was first identified. The worm didn't affect the next version of Yahoo's e-mail service, which remains in its test, or "beta," phase.

"We have taken steps to resolve the issue and protect our users from further attacks of this worm," Yahoo spokeswoman Kelley Podboy said. "The solution has been automatically distributed to all Yahoo Mail customers, and requires no additional action on the part of the user."

As a precaution against variations on the Yamanner worm, Yahoo advised its e-mail users to update their antivirus programs and block all incoming correspondence from av3@yahoo.com.

The worm arrived in the form of an e-mail containing JavaScript and contains the words "New Graphic Site" in the subject field, according to Symantec, the maker of Norton antivirus software.

Unlike many worms that require an attachment to be opened, the latest bug was unleashed as soon as the e-mail was opened. It burrowed into e-mail contact lists in search of addresses containing the domains yahoo.com and yahoogroups.com, according to Symantec.


Edited to say this came from the Yahoo site

Edited again to include link: http://news.yahoo.com/s/ap/20060613/ap_on_hi_te/yahoo_worm;_ylt=Ahb9wbcl0iVujUl8zzwPSxWs0NUE;_ylu=X3oDMTA3b2NibDltBHNlYwM3MTY-
Printer Friendly | Permalink |  | Top
 
im10ashus Donating Member (1000+ posts) Send PM | Profile | Ignore Tue Jun-13-06 01:59 PM
Response to Reply #12
13. I see you are able to copy and paste now.
:-)
Printer Friendly | Permalink |  | Top
 
DU AdBot (1000+ posts) Click to send private message to this author Click to view 
this author's profile Click to add 
this author to your buddy list Click to add 
this author to your Ignore list Tue May 14th 2024, 07:52 PM
Response to Original message
Advertisements [?]
 Top

Home » Discuss » Archives » General Discussion (01/01/06 through 01/22/2007) Donate to DU

Powered by DCForum+ Version 1.1 Copyright 1997-2002 DCScripts.com
Software has been extensively modified by the DU administrators


Important Notices: By participating on this discussion board, visitors agree to abide by the rules outlined on our Rules page. Messages posted on the Democratic Underground Discussion Forums are the opinions of the individuals who post them, and do not necessarily represent the opinions of Democratic Underground, LLC.

Home  |  Discussion Forums  |  Journals |  Store  |  Donate

About DU  |  Contact Us  |  Privacy Policy

Got a message for Democratic Underground? Click here to send us a message.

© 2001 - 2011 Democratic Underground, LLC