Yahoo Email Worm On The Prowl
June 13, 2006 by Kori Ellis
Filed under Computers
PC World is reporting on a new mass mailing worm that is affecting the Yahoo web based email as well as Yahoo Groups mailing lists.
The worm, which Symantec calls JS.Yamanner@m, is different from others in that a user merely has to open the e-mail to cause it to run, said Kevin Hogan, senior manager for Symantec Security Response. Mass-mail worms have usually been contained in an attachment with an e-mail note encouraging a user to open it.
The worm, written in JavaScript, takes advantage of a vulnerability that allows scripts embedded in HTML e-mail to run in the users’ browsers. Yahoo users should be able to modify their settings to block the zero-day exploit, Hogan said.
Symantec rated the worm a Level 2 threat, one notch above its least harmful ranking. Hogan said the worm did not appear to be spreading widely, and he did not anticipate the threat level rising.
The subject line of the problematic email says “New graphic site.” It is recommanded that if you immediately delete this email should you receive it. This worm only affects Yahoo web based email.
