??? for the Yahoo-ers
How many of you have been getting emails titled "Graphic Site"? I got 4 yesterday all from people in my address book. Then this morning I had a few error messages that "I" sent this email to people who didn't have that address anymore. I know that Jaci asked me yesterday what it was because she got one with my name on it, and I have another person from OH that questioned me about it too.
Dawn
Hi Dawn, I have yahoo, but have not recieved anything like this yet. Do you know what it's about? I will keep my eyes open. One thing I have noticed about my yahoo mail is that I can't reply to anything, I have to delete the message and then compose a new letter, that just started happening a few days ago.
weird stuff.
Karyn


I got this from one of the many rabbit groups I'm a member of:
New Worm in YahooMail--please crosspost
Posted by: "Pamela Alley" [email protected] rnrq
Mon Jun 12, 2006 9:21 pm (PST)
Worm wriggles through unpatched Yahoo flaw
By Dawn Kawamoto, CNET News.com
Published on ZDNet News: June 12, 2006, 1:32 PM PT
A new worm that targets Yahoo e-mail users is on the loose, taking advantage
of an unpatched _JavaScript flaw, a security company has warned.
The Yamanner worm targets all versions of Yahoo Web-based mail except the
latest beta version, Symantec said in an advisory released Monday.
Yahoo is working on a patch for the vulnerability, and people are encouraged
to update the antivirus definitions on their PCs, Symantec said. Yahoo could
not be immediately reached for comment.
Yamanner arrives in a Yahoo mailbox bearing the subject header "New Graphic
Site." Once the message is opened, the computer becomes infected and the
worm spreads itself to people on the Yahoo e-mail contact list. The
harvested e-mail addresses are also sent to a remote online server, which
Symantec suspects may use the information for spam campaigns.
"The worm is taking a pretty novel approach," said Dean Turner, senior
manager of Symantec Security Response. "It takes advantage of a _JavaScript
vulnerability, so the user doesn't even have to click on an attachment to
get infected."
Yamanner exploits the Yahoo flaw by enabling the scripts that are embedded
in HTML e-mails to be run by the user's Web browser.
The worm, which was spotted in the wild early this morning, ha**** the
remote server more than 100,000 times, forwarding Yahoo e-mail addresses
harvested from unsuspecting users, Turner said.
Although the worm is spreading quickly, and no patch has been issued,
Symantec is rating the threat a "2." The security vendor uses a 1-to-5
rating system, with "5" as its most severe category.
"Antivirus definitions have been released for it, and Yahoo is working on a
patch, so we don't want to cry wolf," Turner said. "Although there is the
potential the worm will affect a larger number of people, for now to raise
it to another (higher) level would be inappropriate."
He added it is premature to predict whether this worm will morph into other
forms and attack other browser-based forms of e-mail, such as Google's
Gmail.
Systems affected include Windows 2000, Windows 95, Windows 98, Windows Me,
Windows NT, Windows Server 2003 and Windows XP, according to Symantec's
advisory.