Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » Yahoo IM worm

Yahoo IM worm

by Nikola Strahija on May 23rd, 2006 Yahoo Instant Messaging system has been suffering from a worm for two weeks now. Users who are not careful enough get their browser hijacked.


The yhoo32.explr worm installs a rouge web browser under name Safety Browser. Smart enough, the Safety Browser uses the same desktop icon as Internet Explorer, and once the user double clicks it, the browser takes them to the web site, which installs spyware.

This worm is interesting because it is the first one to install its own web browser on infected PCs. Face Time, which discovered the worm, says that it also hijacks the home site of Internet Explorer, and replaces it with a Safety Browser's website. Furthermore the worm sends itself to all user's contacts.

The worm comes as a link in an instant message.


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »