Yahoo Porn List and spam mails

Parker · Jun 12, 2006

Guys, I have received a chain spam mail which seems to have gone thru a list of folks from Bladeforums -

it seems to have replicated from my email and is sending out a bunch of yahoo club links decidedly un-knifey in content.

If you get anything sent to your email indicating "New Graphics Site" dump it. Do NOT open it, as your fellow BFC members and perhaps other email buddies will get all sorts of crap they don't need and also maybe a few nasty misunderstandings.

To anyone getting this from my email, I apologize for any inconvenience or problem this may cause. I opened it without knowing.

Parker

Parker · Jun 13, 2006

http://www.symantec.com/outbreak/yahoo_mail.html

Threat Advisory Center
New Email Threat Targeting Yahoo! Mail Accounts

What It Is
New Email Threat Targeting Yahoo! Mail Accounts

Symantec Security Response today identified a new worm that exploits a vulnerability in Yahoo!s Web-based e-mail program. The worm JS.Yamanner@m spreads itself to the users Yahoo! e-mail contacts when the user opens an e-mail infected by the worm. In addition, the worm also sends these e-mail addresses to a remote server on the Internet. Only people with an e-mail address that is on yahoo.com or yahoogroups.com may be impacted by this worm.

Symantec currently provides antivirus detection signatures to protect Yahoo! Mail account users against the JS.Yamanner worm. Symantec encourages these users to run LiveUpdate to ensure that they have the latest security updates.

Symantec Security Response is currently categorizing JS.Yamanner as a Level 2 threat (on a scale of 1 to 5, with 5 being most severe). Users of Yahoo! Mail Beta do not appear to be vulnerable to the worm.

The e-mails can be recognized by the following title and contents:
From: <Various email addresses>
Subject: New Graphic Site
Body: This is test
Note: If users accidentally open an infected e-mail, they will also see that their browser window is re-directed to the URL: http://]www.av3.net/index.htm.

Yahoo! is a popular e-mail program and is not normally affected by this type of threat. There is no patch at the present time and Symantec is recommending that users ensure that they have the latest security updates.

The Symantec Security Response Web site provides additional details at:
http://securityresponse.symantec.com/