Yahoo account exploit selling on black market

Yahoo is investigating the claims of a hacker who is selling an exploit that apparently hijacks Yahoo mail accounts.

“The exploit, being sold for $US700 by an Egyptian hacker on an exclusive cybercrime forum, targets a cross-site scripting (XSS) weakness in yahoo.com that lets attackers steal cookies from Yahoo! Webmail users,” wrote Brian Krebs, a noted security blogger who reported the illegal offer to Yahoo.