Home » Hacking News » Yahoo IM worm
Yahoo IM worm
by Nikola Strahija on May 23rd, 2006 Yahoo Instant Messaging system has been suffering from a worm for two weeks now. Users who are not careful enough get their browser hijacked.
The yhoo32.explr worm installs a rouge web browser under name Safety Browser. Smart enough, the Safety Browser uses the same desktop icon as Internet Explorer, and once the user double clicks it, the browser takes them to the web site, which installs spyware.
This worm is interesting because it is the first one to install its own web browser on infected PCs. Face Time, which discovered the worm, says that it also hijacks the home site of Internet Explorer, and replaces it with a Safety Browser's website. Furthermore the worm sends itself to all user's contacts.
The worm comes as a link in an instant message.
