A fast spreading Trojan attack, Exploit.JS.ADODB.Stream.e, is targeting users of Yahoo Messenger, which was first reported on October 2, 2006. The wide user base of Yahoo messenger has made millions of users vulnerable to this new attack. Users are receiving messages with Trojan containing website links from infected contacts.
Elitecore Technologies' Cyberoam Unified Threat Management (UTM) appliances provided early protection against the latest Windows vulnerability that targets users of Yahoo Messenger. The Trojan takes control of the Yahoo messenger application and sends messages to the user's contacts.
"Cyberoam UTM appliances' Gateway Anti-virus was one of the earliest to offer protection against the threat with the addition to its signature database," says Harish Chib, Vice-President - Marketing, Elitecore Technologies. "While most desktop Anti-virus failed to detect it, Cyberoam offered a twin-shield protection to this new threat," he added.
The severity of the attack rose due to the receipt of instant messages from a known contact and the tempting content of the message like: "oh my god, I've won a 20000 USD lottery http://nsl-school.org/?id=winning_list. Come to my house tonight for a party!!" Variations of the content and links were reported too.
