Yahoo IM Phishing Attack

IMLogic, an Instant messaging security firm, warned of a new phishing attack making its way through the Yahoo! Messenger network on Monday.

The attack, IM.Marphish2.Yahoo, attempts to steal personal information by making a user into believing that they are in violation of Yahoo’s Terms of Service.

The user is instructed to contact the “abuse department” through a URL that points to the 2wahms.com domain (a site like snipurl.com). When visited, the page looks similar to a Yahoo login page. However, once a user enters their personal information, the site steals the users username and password.