Yahoo Servers Hacked through 'Shellshock' Security Hole

Oct 06, 2014 03:25 PM EDT | Jordan Ecarma

No user data was leaked when Yahoo computer servers were recently infiltrated by hackers, according to the company.

The breach happened over the weekend when hackers exploited the Shellshock vulnerability, which lets attackers insert extra lines of code and take control, Bloomberg News reported.

"Last night, we isolated a handful of our impacted servers and at this time we have no evidence of a compromise to user data," Yahoo said in a statement quoted by Bloomberg. "We're focused on providing the most secure experience possible for our users worldwide and are continuously working to protect our users' data."

Security researcher Jonathan Hall, president and senior engineer of technology consulting firm Future South Technologies, said he discovered a botnet developed by Romanian hackers that exploited the Shellshock security hole to infiltrate Yahoo servers and other domains, according to Ars Technica.

The white-hat hacker detailed the finding on the Future South Technologies website.

"These are the two servers that were 100 per cent positively identified as being compromised, with the dip4.gq1.yahoo.com server being the initial point of entry via Shellshock," Hall said in a Reddit post reported by Forbes.

While there are thousands of victims, Yahoo is the most noteworthy name to be exploited through Shellshock.

See Now: OnePlus 6: How Different Will It Be From OnePlus 5?

© 2024 Auto World News, All rights reserved. Do not reproduce without permission.
Get the Most Popular Autoworld Stories in a Weekly Newsletter

Join the Conversation

Real Time Analytics