Yahoo Messenger Exploit Changes Status Messages

snoopy · Dec 6, 2011

December 4, 2011, 7:04PM
Yahoo Messenger Exploit Changes Status Messages
Security researchers at BitDefender are warning users about a new Yahoo! Messenger vulnerability that allows an attacker to change victims’ status updates.

According to the security firm, the situation has been exploited in the wild to target version 11.x of the Messenger client. The vulnerability allows attackers to take advantage of the level of trust status messages have and potentially serve users with malicious links, blogged Bogdan Botezatu, senior communications specialist at BitDefender.

"Chances are that, once displayed, they will be clicked by most contacts who see them," he wrote.
“One scenario: the victim's status message is swapped with an attention-getting text that points to a page hosting a zero-day exploit targeting the IE browser, the locally installed Java or Flash environments or even a PDF bug, to mention only a few,” he continued. “Whenever a contact clicks on the victim’s status message, chances are they get infected without even knowing it.”

The vulnerability could also be used as part of an affiliate marketing scheme designed to push Web traffic to certain sites - all while the victim remains blissfully unaware their status has been hijacked, he wrote.
Click to expand...

Read more here: https://threatpost.c...messages-120411

Log in or Sign up

Yahoo Messenger Exploit Changes Status Messages

snoopy Registered Members

Share This Page

Log in or Sign up

Yahoo Messenger Exploit Changes Status Messages

snoopy Registered Members

Share This Page

Useful Searches