FANDOM


YahLover is a fake error message displayed by a malicious website. It can affect both Microsoft Windows and Mac OS

Payload

This virus shows a fake message with a loud beeping noise claiming their computer has been infected. Users are encouraged to contact technical support via a telephone number ("1-800-214-7440") provided. The number varies depending on the malicious website, the phone number would be different. As mentioned above, however, YahLover is fake and merely a scam. The scammer will typically attempt to get the victim to allow remote access to their computer. After remote access is gained, the scammer relies on confidence tricks typically involving utilities built into Windows and other software in order to gain the user’s trust to pay for the supposed “support” services, when the scammer actually steals the victim’s credit card account information.

When the YahLover Scam is displayed in the user's browser it will display alerts similar to the following:

'*************************************************
RDN/YahLover.worm!055BCCAC9FEC Infection
*************************************************
Call Technical Support Immediately at +1-888-534-6135
The following data will be compromised if you continue:
1. Passwords
2. Browser History
3. Credit Card Information
This virus is well known for complete identity and credit card theft. Further action through this computer or any computer on the network will reveal private information and involve serious risks.

Call Technical Support Immediately at +1-888-534-6135');

YahLover is also found on Securityagainstwannacry.com. It is almost the same except the phone number is different.

Community content is available under CC-BY-SA unless otherwise noted.