Victims get instant messages that appear to be from friends and end up at fake Yahoo-like site.
Yahoo Messenger is the target of a phishing attack in which victims receive messages that appear to come from people on their buddy lists. When they click on a link in a message, they're transported to what they believe is a Yahoo Web site, where their login information is taken down by perpetrators. A Yahoo spokesperson confirmed the attack Friday.
Earlier this month, MSN Messenger was hit by a worm attack in which recipients were asked to click on a link, causing keylogging software to be downloaded onto the victims' PCs.
The Yahoo Messenger attack appears to be the result of a worm that steals buddy-list data and sends out instant messages containing a link to the phony Web site, says Pete Lindstrom, research director at Spire Security, which provides research and analysis on information security. The message appears to come from someone the victim knows, making the scam more difficult to detect than an E-mail phishing attack.
Building A Mobile Business MindsetAmong 688 respondents, 46% have deployed mobile apps, with an additional 24% planning to in the next year. Soon all apps will look like mobile apps – and it's past time for those with no plans to get cracking.
Join us for a roundup of the top stories on InformationWeek.com for the week of December 14, 2014. Be here for the show and for the incredible Friday Afternoon Conversation that runs beside the program.