nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Yahoo mail hacked today?

Talic

Did anyone else get attacked with a trojan when loading their Yahoo web mail? It seemed like it's fixed now but around noon pacific Yahoo tried to load a trojan when logging into their web mail.

Weird thing is none of the tech news outlets said anything about it.

Find more posts tagged with

SAVE $250 on Your Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View Boot Camps

Comments

carboncopy

Talic wrote: »

Weird thing is none of the tech news outlets said anything about it.

Maybe because it only happened to you?

Do you know anyone else that had this happen to them?

tiersten

You go to a phish site by accident?

Paul Boz

It's not being reported because it didn't happen. GMail went down for 30 minutes a few weeks ago and it was world-wide news. If Yahoo was hacked and loading trojans everyone would be talking about it.

Talic

I'm pretty sure I wasn't phished, I used the bookmark I always used and my kaspersky security suite has phishing protection.

Kaspersky came back and said it was a trojan, so do you guys think it was a false positive? Here's a screenshot:

tiersten

HEUR:Trojan-Downloader.Script.Generic means the scanning engine heuristic algorithms thinks that it could be sort of trojan downloader but it isn't a positive match to anything.

The problem with heuristics is that you either have it set with a low threshold and get a high number of false positives or have it set with a high threshold and potentially let malicious code through. In this case, it is a false positive if you look at the Kaspersky forum.

What Paul Boz said anyway. If there was a real trojan of some kind on a high profile site like Yahoo then you'd see warnings about it everywhere.

Googling HEUR:Trojan-Downloader.Script.Generic and Yahoo brings up all the necessary details...