From today's SANS NewsBites Vol. 8 Num. 41

WORMS, ACTIVE EXPLOITS, VULNERABILITIES & PATCHES
--Worm Spreads Through Yahoo Messenger
(22 May 2006)
The yhoo32-explr worm spreads through Yahoo's instant messaging network
and installs what it calls a "Safety Browser." The Safety Browser
hijacks Internet Explorer homepages and redirects it to a site that
downloads spyware onto infected machines.
http://www.theregister.co.uk/2006/05/22/safety_browser_im_worm/print.html
http://www.eweek.com/print_article2/0,1217,a=178894,00.asp
http://www.vnunet.com/vnunet/news/2156523/yahoo-messenger-worm-turns-ie



Doc