Malware sent from Yahoo! advertisement has caused thousands of people to be infected

ByYahoo

A major US portal siteYahoo.comThe malware was sent via advertisement of, and it turned out that many users' PCs were infected with malware.

Malicious advertisements served via Yahoo | Fox-IT International blog
http://blog.fox-it.com/2014/01/03/malicious-advertisements-served-via-yahoo/

Thousands of visitors to yahoo.com hit with malware attack, researchers say
http://www.washingtonpost.com/blogs/the-switch/wp/2014/01/04/thousands-of-visitors-to-yahoo-com-hit-with-malware-attack-researchers-say/

Fox IT, a security company in the Netherlands, said, "From the Yahoo! advertisement server, malware was sent to hundreds of thousands of users in the past few days," he said on the blog. According to Fox IT, Yahoo! The server delivers "exploit kit" file to users instead of advertisement, and this exploit kit uses Java vulnerability to install various malware. Fox IT, Yahoo! after December 30 at the latest. Users are beginning to be infected with malware, and it is estimated that about 9% of them were infected with malware sent to 300,000 users per hour.

Also, Mark Roman of Surfright, an anti-virus software company based in the Netherlands, on Twitter, Yahoo! I confirmed that I checked malware that was delivered via the Internet.

Yahoo's ad [.] Yahoo [.] Com redirecting to exploit kit, malware ht@ RenartdegraaffPic.twitter.com/eD2bOPjJ0N

- Mark Loman (@ markloman)2014, January 3

Security researcher Ashkhan Sultani says, "Attacks using this malware are thought to have occurred as a result of Yahoo!'s ad network server being hacked." Fox IT is currently Yahoo! Although the malware infections are decreasing gradually thanks to the measures taken by the security team, it is suggested that a hacker who placed malware may have sold "rights" to other criminal groups that can control PCs of infected persons I will.

The malware confirmed this time,JavaThe security experts recommend that Java be disabled if the web browser supports Java. In addition, JavaJavaScriptIs a completely different programming language, JavaScript is irrelevant for this malware problem.

ByXelipe

Yahoo! The spokeswoman,Washington Post"We recently detected malware infected from advertisements, we immediately remove the malware and continue monitoring it.Yahoo! Puts emphasis on user safety and privacy protection." I reply by e-mail. Also, Yahoo! "In this case,Users in North America, Asia, Latin America, Mac and mobile users are not afraid of infecting malware"We announced.