A new JavaScript worm targeting Yahoo!’s email program has been found in the wild by Symantec Security Response today.

Symantec said the worm, JS.Yamanner@m, spreads itself to a user’s Yahoo! email contacts when the user opens an email infected by the worm. JS.Yamanner sends these email addresses to a remote server on the Internet.

“This worm is a twist on the traditional mass-mailing worms that we have seen in recent years. Unlike its predecessors, which would require the user to open an attachment in order to launch and propagate, JS.Yamanner makes use of a previously-unknown security hole in the Yahoo! Web mail program in order to spread to other Yahoo! users and harvests user information for possible future attacks,” said Symantec Security Response Director, Dave Cole. 

Only those using contacts with an email address that is @yahoo.com or @yahoogroups.com are affected by the worm. Yahoo! Mail Beta users are not vulnerable to JS.Yamanner.

A message from JS.Yamanner can be distinguished by the following:
From: av3@yahoo.com
Subject: New Graphic Site
Body: this is test.

Also, if users open an infected email, their browser window is re-directed to display the Web page with URL: www.av3.net/index.htm.

JS.Yamanner is currently categorised as a Level 2 (out of five) threat by Symantec Security Response.

The company said that since a Yahoo! patch is unavailable, updating anti-virus definitions and deleting any emails received from av3@yahoo.com is highly recommended.

See: http://securityresponse.symantec.com/

PAN1992 MWO Banners LB 728x90px V2 Yahoo! Email Worm Emerges
DCS 6100LH 728x90 smarthouse Yahoo! Email Worm Emerges
728x90 7 Yahoo! Email Worm Emerges
en us WD Black Banners Portfolio 728x90 Yahoo! Email Worm Emerges
Sony 290ES 728x90 1 Yahoo! Email Worm Emerges
BEL2117 4Square AUF001 728x90 Yahoo! Email Worm Emerges
LG HE FN Series Banners 4SQM LB 728x90 Yahoo! Email Worm Emerges
2231 NEXUS 4SQM Digital Banner Ads Leaderboard 728x90 Yahoo! Email Worm Emerges
728x90 Leaderboard Yahoo! Email Worm Emerges
728 x 90  Yahoo! Email Worm Emerges