Yahoo Messenger is under attack by phishers - victims get links that appear to come from people in their contact list. But when they click on the link they will receive a site that looks like a Yahoo website, but in fact it is a malicious website designed to steal user information such as their login name and passwords.
The Yahoo Messenger phishing attack is caused by a worm that first steals buddy-list information and then sends out messages. Victims are tricked to believe that the messages come from their buddies.
Source: InformationWeek
Yahoo Messenger hit by phishing attack
