Yahoo Malaysia
| Primary URL | Location | Industry | yahoo[.]com |
Country
Malaysia
|
Technology
|
|---|
Profile
Yahoo provides a suite of internet services including a search engine, email platform, news portal, finance information, sports coverage, and advertising solutions. These services are delivered globally through localized portals such as Yahoo Malaysia, which tailors content and language for users in Malaysia. Yahoo Malaysia operates under the Yahoo brand and offers the same core products while incorporating local news, weather, and market data relevant to Malaysian audiences. The platform enables users to search the web, communicate via Yahoo Mail, access personalized news feeds, and utilize Yahoo Finance for stock and currency information. Advertisers can reach audiences through Yahoo's display and native ad formats, which are integrated across its properties.
In April 2015, Yahoo Malaysia suffered a defacement attack by a group of Bangladeshi hackers who replaced its homepage with a message boasting their exploits. A separate incident in January 2014 involved the theft of proprietary code that allowed attackers to forge authentication cookies, compromising at least 500 million Yahoo accounts and exposing personal data such as names, email addresses, telephone numbers, dates of birth, hashed passwords, and security questions. In December 2013, a breach of Yahoo's advertising network delivered malicious ads exploiting Java vulnerabilities, affecting an estimated 300,000 users per hour and leading to approximately 27,000 infections primarily among European PC users. Earlier, in January 2012, a claim surfaced on a dark web marketplace that approximately 200 million Yahoo user credentials, including usernames, MD5‑hashed passwords, dates of birth, and backup email addresses, were being sold for around $1,860 in bitcoin. These incidents highlight the scale of Yahoo's user base and the attractiveness of its data to threat actors, while also showing the company's response measures such as invalidating compromised cookies, removing malicious ads, and investigating credential leaks.
