Blog | G5 Cyber Security

WinYahoo PUP Modifies Chrome Secure Preferences

An interesting PUP known as “WinYahoo” modifies secure settings in Chrome undetected and hijacks browser settings while also installing rogue extensions. WinYahoo gets its name from the files it creates in the users Program Files directory, along with Yahoo being set as the default search engine and homepage in installed browsers. This is another example of a PUP using a technique commonly seen in malware, a topic we discussed not too long ago. This is a similar case with unwanted Bitcoin miners being installed.”]

Source: https://blog.malwarebytes.com/threat-analysis/2015/05/winyahoo-pup-modifies-chrome-secure-preferences/

Exit mobile version