Yahoo Mail Users Hit by Widespread Hacking, XSS Exploit Seemingly to Blame (Update: Fixed)

Author:

Emil Protalinski

Source:

Late last night reports started coming in suggesting that Yahoo Mail users have had their accounts hacked. While “hacked” is a very broad term nowadays, it does appear that Yahoo email accounts are being compromised after users click on a malicious link they receive in their inboxes.

Update at 6:20PM EST: Yahoo says it has plugged the security hole in question as detailed at the bottom of this article.

A bit of digging shows the attack seems to have been carried out by a lone hacker by the name Shahin Ramezany. He has uploaded a video to YouTube demonstrating how to ...