Email attack exploits vulnerability in Yahoo site to hijack accounts