Warning out vs Yahoo Messenger 'malvertising'

Users of Yahoo Messenger are warned against a new malware targeting the instant messaging software that can hijack their browsers' home pages.

 

The Hot for Security blog said the malicious ad, which leads to a Vietnamese website, was displayed on all Yahoo Messenger windows worldwide.

 

"It is not yet clear whether the banner has reached YIM customers following a legit advertising campaign that was modified by the advertiser later, or if it is an abusive attack that exploits a bug in the Yahoo Ad services," said researcher Bogdan Botezatu.

 

For now, Botezatu said what is certain is that users who followed the "neatly crafted banner" were directed to laban.vn, where they were prompted to install an exe file.

 

The exe file, once run, will look for installed browsers and hijack the start page to laban.vn.

 

But what makes it a threat is that it loads itself to the list of Windows startup entries, so will start every time the system boots.

 

"If you have already installed the respective exe file, simply changing the browser’s start page won’t be enough," Botezatu said. — TJD, GMA News