Hacker selling Yahoo email exploit
A hacker is selling an exploit which allows buyers to hijack Yahoo email accounts.
The hacker, “TheHell”, showed off the exploit through a video posted video hosting site, Darkode, which has now made its way to YouTube.
“I’m selling Yahoo stored xss that steal Yahoo emails cookies and works on ALL browsers. And you don’t need to bypass IE or Chrome xss filter as it do that itself because it’s stored xss. Prices around for such exploit is $1,100 – $1,500, while I offer it here for $700. Will sell only to trusted people cuz I don’t want it to be patched soon,” TheHell said.
Yahoo! has been notified and is looking for the security hole, which it said can be fixed in a few hours, once discovered.
Source: Naked Security
Related articles
Hacker convicted for iPad data breach
Unhackable telecom networks a step closer
Anonymous targets Israeli websites