Posted on 09/19/2006 5:36:00 PM PDT by Eagle9
An unpatched vulnerability in all editions of Microsoft's Internet Explorer browser is being exploited, security researchers said Tuesday, with the attack dumping a broad range of adware, spyware, and Trojans onto PCs whose users simply surf to an infected or malicious site.
First reported by Sunbelt Software -- although rival Internet Security Systems claimed it was the first to discover the bug -- the vulnerability is in how IE renders VML (Vector Mark-up Language), an extension of XML that defines on-the-Web images in vector graphics format. The previously unknown -- and thus unpatched -- bug inside IE is already being used by attackers.
So far, said Eric Sites, vice president of research and development at Sunbelt, the exploit has shown up on hardcore porn sites, which are serving a buffet of badware to users who visit those sites.
"First they were pushing Virtumondo adware," said Sites, "but by late afternoon yesterday, these sites were distributing more than 40 different types of malware, including keyloggers, adware, and backdoors."
The new exploit seems to have a connection to WebAttacker, an multi-exploit attack "kit" created by a Russian group that sells for as little as $15 to $20. "We think that this new exploit is inside a new [version of the] kit," said Sites. "If that's true, then it will end up all over the place."
Sites said he expects that the exploit will migrate to one of the so-called "iframe cash" sites -- the term comes from the iframecash.biz site -- which use affiliates to push unpatched exploits to a large number of other Web sites, some of which are legitimate addresses whose servers have been previously compromised.
"This could end up being in lots
(Excerpt) Read more at techweb.com ...
A website about drugs (legal OTC and prescription stuff) that was the top result on Google recently downloaded a trojan on my computer. The stupid thing would show as infecting my computer everytime I rebooted even after the anti-virus said it cleaned it. It took several hours of running several online AV scans, deleting, rebooting and deleting system restores to get the stupid thing clean.
Another great commercial for firefox.
There are plug-ins for Firefox that let you change the reported "user-agent" (essentially the info sent to the server that tells it what browser you're using).
Don't know if that'd solve either of your respective problems, but could be worth a shot.
LOL, Spyware, sounds familiar
They're very similar. Why not just get a USB card reader and edit with Irfanview? Works better for me with my Nikon. You could also use Bibble, it's great.
If you do the Firefox thing install some add ins. I use UserAgentSwitcher, Adblock+, FilterSetGUpdater, CustomizeGoogle, NoScript, Unplug, Scrapbook, Flashblock, Fasterfox, Safecache, and Safehistory.
I've used them both for a while and very rarely do I see an advertisement, anymore.
That is exactly what I do. A very few sites that I use in my business only work with IE, and a few non work related sites. But these are sites that I am sure are not malicious. Generally, if it is not a necessary site and it only works with IE, then tough, I just don't use it. But really, I don't have to resort to IE much at all.
IE more user friendly? Only when it is run in the default set-up: With every security risk wide-open.
A lot of times "user friendly" is really just what we are habitually accustomed to. And even still, the few things in FF that require an extra step, well, I figure it is a reasonable price to pay for all the other aspects that are superior.
WebTV has no viruses, worms, trojans, popups
Amazing a dinky inexpensive unit by MSFT can ignore them
But expensive PCs require lots of fun stuff, firewalls, screens, security software
Makes one wonder
Do PC users enjoy the pain?
If they are so great why is a WebTV immune?
Oh, beat me.
This generally works with most sites.
Small target. I don't imagine that there are many webtv boxes out there, so hackers/crackers spend their time going after a larger user base.
I agree. But since 1.5.0.7, I've lost any obvious way to uninstall it. It doesn't show up in Add/Remove programs and the uninstall in the program folder doesn't do anything.
Only effective - if it works [the words!]
I am posting YOUR gifs tonight!!
And those are the ones I don't use. I've blown off many online stores since their sites only worked in IE, even though they had what I want. About the only things I use IE for are Windows Update and managing Virtual Server.
I've got IE and a Mozilla browser.
Between WebTVs & the newer MSFT MSN-TVs [no great TV goodies on the new units] there are many out there now.
The RCA WebTV "Plus" running with DirecTV and a really good vintage amp and speakers [huge Marantz here] spends not one second or one penny on security, scans, software, rebooting, etc.
On a large TV it beats the PCs and the wireless keyboards and remotes let you move around or surf, email from distances in comfort.
I use two TVs at once.
MSN sez it cannot be done.
O'Reilly rerun on FNC right now -
--
Hackers/crackers need to watch out
We can do some unusual things with these El Cheapo gizmos
My index or default pages ususually send them to the FBI site to grab a few tasty cookies there
Or shuts down their toys
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.