Malware Advertisement Served in Yahoo Mail

Save
Comments: 0
Views: 3,274
Updated: March 12, 2014 2014-03-12T20:13:26
Date: May 9, 2013 2013-05-09T22:15:55

Two days ago, a malicious advertisement banner from eqads.com started showing in Yahoo Mail. The malicious advertisement caused persons' web browsers, who were checking their Yahoo Mail, to redirect to the malicious websites: 1lalervo.info and skiajkax.sytes.net. These websites contain the malicious Java and PDF exploit codes, which can be used to infect your computer with malwares. Eqads.com, a legitimate online advertising network that Yahoo serves advertisements from, was injected with this malicious advertisement.

This process of injecting malicious or malware advertisement into legitimate online advertising networks and web pages is called Malvertising.

Some Yahoo Mail users, who were using Google Chrome web browser, may have noticed that Google Chrome blocked access to Yahoo Mail. This is because Google Chrome has a built-in feature called Google Safe Browsing, which is used to block malicious website before you can visit them.

Google Chrome blocking access to Yahoo Mail at mg5.mail.yahoo.com

Now, this malicious advertisement may have appeared on other legitimate websites that serve advertisements from the Eqads.com online advertising networks. So, it is impossible to tell how many computers around the world were infected with malwares because of this malicious advertisement.

As a precautionary measure, we are asking that you use your antivirus software to do a full scan of your computer. Or, you may do a quick antivirus scan with bitdefender.com online virus scanner. Click here to do the quick scan.

Note: Some of the names, addresses, email addresses, telephone numbers or other information in samples on this website may have been impersonated or spoofed.

Please share what you know or ask a question about this article by leaving a comment below. Check the comment section below for additional information, if there is any. Remember to forward suspicious, malicious, or phishing email messages to us at the following email address: info@onlinethreatalerts.com. And, report missing persons, scams, untrustworthy, or fraudulent websites to us. Tell us why you consider the websites untrustworthy or fraudulent. Also, to quickly find answers to your questions, use our search engine.

You can help maintain Online Threat Alerts (OTA) by paying a service fee. Click here to make payment.

Comments, Questions, Answers, or Reviews

There are no comments as yet, please leave one below or revisit.

To help protect your privacy, please do not post or remove, your full name, telephone number, email address, username, password, account number, credit card information, home address or other sensitive information in or from your comments, questions, or reviews.