More information available at: http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]
Its purpose appears to be to propagate and harvest email addresses, and submit them to a spam database. -JG On Mon, Jun 12, 2006 at 07:23:50AM -0600, Jesse Gough wrote: > In case anyone hasnt seen this yet, be careful about using your yahoo > webmail accounts. > > -JG > > ----- Forwarded message from David Loyall <[EMAIL PROTECTED]> ----- > > Hello, all. > > I just received an email with an html attachment, on a yahoo account. > > When I opened the mail, yahoo automatically displayed the html, and executed > the code within. What the hell. =) It forwarded the message to my contacts > list, (or some other set of addresses, dunno,) and redirected my browser to > a website. > > I'm of to a BBQ, and I don't care about yahoo. So I'm not even going to > read the code and see how this happens. I'm attaching the html file as a > text file. Enjoy! > > Oh, I've CC'd [EMAIL PROTECTED], but if someone else would give them a proper > write-up, and encourage them to close the hole, that'd be wonderful. > > Cheers, > --David Loyall > Omaha, Nebraska > David Loyall <http://david.loyall.googlepages.com> > > ----- End forwarded message ----- ------------------------------------------------------------------------------ This List Sponsored by: Black Hat Attend the Black Hat Briefings & Training USA, July 29. August 3 in Las Vegas. World renowned security experts reveal tomorrow.s threats today. Free of vendor pitches, the Briefings are designed to be pragmatic regardless of your security environment. Featuring 36 hands-on training courses and 10 conference tracks, networking opportunities with over 2,500 delegates from 40+ nations. http://www.blackhat.com ------------------------------------------------------------------------------
