Attackers are exploiting a web service application to crack into Yahoo email accounts.