Russian sites using new IE bug to install spyware

Tuesday, September 19, 2006

Russian sites using new IE bug to install spyware

You are sending an email that contains the article
and a private message for your recipient(s).

Your Name:

Your e-mail:

* Required!

Recipient (e-mail):

*

Subject:

*

Introductory Message:

HTML/Text
(Photo: Yes/No)

(At the moment, only Text is allowed...)

Message Text:

Hackers are taking advantage of a newly discovered vulnerability in Internet Explorer (IE) to install spyware on PCs that visit a number of Russian pornography sites.

The malware, first reported Monday by researchers at Sunbelt Software Inc., takes advantage of an unpatched flaw in the way Microsoft Corp.'s IE processes Vector Markup Language (VML) code. VML is a language used to display graphic information on the Web. The attack appears to work on all versions of Windows running the IE 6 browser, said Eric Sites, Sunbelt's vice president of research and development. "It's not an operating system-dependent issue," he said.

For more information, click at the 'Source' link!