Yahoo patches email security hole, stops virus' spread

NEW YORK (MarketWatch) -- Yahoo Inc. (YHOO) said it fixed a security hole that allowed an email virus to spread among users of its Web-based Yahoo Mail service Monday, ending the virus' ability to spread.
The fix was automatically distributed to all Yahoo Mail users, making them immune to the threat. The Sunnyvale, Calif., Internet company said it detected the virus on Monday morning and that it affected only "a very small fraction of Yahoo! Mail users."
"Yahoo! treats security and user protection seriously," said spokeswoman Kelley Podboy in an email. "When we learn of e-mail abuse, such as a worm or other online threat, we take appropriate action."
The malicious program, dubbed "Yamanner" by antivirus-software maker Symantec Corp. (SYMC), was able to spread by using Yahoo Mail contact lists. It took advantage of the previously unknown programming flaw in Yahoo's email system to spread automatically when users opened virus-laden emails. Unlike most email viruses, it wasn't necessary to open an attachment to activate Yamanner.
The virus also harvested addresses in victims' contact lists and sent them to a remote server on the Internet, perhaps in preparation for a future attack, Symantec said.
Yahoo advised its users to update their antivirus software and firewall defenses and to review Yahoo's online guide to computer security at http://security.yahoo.com/.


Related Links:

• Go back to category Internet & Networks to read more reviews and articles.
• Go back to Software Magazine's main page.