Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

New Exploit Rocks IE, Downloads Scores Of Spyware, Adware
TechWeb ^ | September 19, 2006 | Gregg Keizer

Posted on 09/19/2006 5:36:00 PM PDT by Eagle9

An unpatched vulnerability in all editions of Microsoft's Internet Explorer browser is being exploited, security researchers said Tuesday, with the attack dumping a broad range of adware, spyware, and Trojans onto PCs whose users simply surf to an infected or malicious site.

First reported by Sunbelt Software -- although rival Internet Security Systems claimed it was the first to discover the bug -- the vulnerability is in how IE renders VML (Vector Mark-up Language), an extension of XML that defines on-the-Web images in vector graphics format. The previously unknown -- and thus unpatched -- bug inside IE is already being used by attackers.

So far, said Eric Sites, vice president of research and development at Sunbelt, the exploit has shown up on hardcore porn sites, which are serving a buffet of badware to users who visit those sites.

"First they were pushing Virtumondo adware," said Sites, "but by late afternoon yesterday, these sites were distributing more than 40 different types of malware, including keyloggers, adware, and backdoors."

The new exploit seems to have a connection to WebAttacker, an multi-exploit attack "kit" created by a Russian group that sells for as little as $15 to $20. "We think that this new exploit is inside a new [version of the] kit," said Sites. "If that's true, then it will end up all over the place."

Sites said he expects that the exploit will migrate to one of the so-called "iframe cash" sites -- the term comes from the iframecash.biz site -- which use affiliates to push unpatched exploits to a large number of other Web sites, some of which are legitimate addresses whose servers have been previously compromised.

"This could end up being in lots

(Excerpt) Read more at techweb.com ...


TOPICS: Technical
KEYWORDS: browser; embracethepenguin; exploit; getamac; godiamtiredofthis; ie; lowqualitycrap; malware; microsoft; microsoftsecurity; ocrap; pr0nware; spyware; windows
Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-8081-95 next last
To: Eagle9

A website about drugs (legal OTC and prescription stuff) that was the top result on Google recently downloaded a trojan on my computer. The stupid thing would show as infecting my computer everytime I rebooted even after the anti-virus said it cleaned it. It took several hours of running several online AV scans, deleting, rebooting and deleting system restores to get the stupid thing clean.


41 posted on 09/19/2006 7:02:23 PM PDT by OrangeDaisy
[ Post Reply | Private Reply | To 1 | View Replies]

To: Eagle9

Another great commercial for firefox.


42 posted on 09/19/2006 7:06:29 PM PDT by mysterio
[ Post Reply | Private Reply | To 1 | View Replies]

To: Vermonter; rocksblues

There are plug-ins for Firefox that let you change the reported "user-agent" (essentially the info sent to the server that tells it what browser you're using).

Don't know if that'd solve either of your respective problems, but could be worth a shot.


43 posted on 09/19/2006 7:13:25 PM PDT by Tree of Liberty (Islam delenda est)
[ Post Reply | Private Reply | To 12 | View Replies]

To: bitt; devolve
save yourselves!

LOL, Spyware, sounds familiar


44 posted on 09/19/2006 7:15:08 PM PDT by potlatch (Does a clean house indicate that there is a broken computer in it?)
[ Post Reply | Private Reply | To 40 | View Replies]

To: KyHammer

They're very similar. Why not just get a USB card reader and edit with Irfanview? Works better for me with my Nikon. You could also use Bibble, it's great.

If you do the Firefox thing install some add ins. I use UserAgentSwitcher, Adblock+, FilterSetGUpdater, CustomizeGoogle, NoScript, Unplug, Scrapbook, Flashblock, Fasterfox, Safecache, and Safehistory.


45 posted on 09/19/2006 7:17:08 PM PDT by spudsmaki
[ Post Reply | Private Reply | To 33 | View Replies]

To: OrangeDaisy
You might want to take a look at Adblock Plus and Filterset.G

I've used them both for a while and very rarely do I see an advertisement, anymore.

46 posted on 09/19/2006 7:20:16 PM PDT by Tree of Liberty (Islam delenda est)
[ Post Reply | Private Reply | To 41 | View Replies]

To: driftdiver
and only use IE for the online application sites that require IE.

That is exactly what I do. A very few sites that I use in my business only work with IE, and a few non work related sites. But these are sites that I am sure are not malicious. Generally, if it is not a necessary site and it only works with IE, then tough, I just don't use it. But really, I don't have to resort to IE much at all.

47 posted on 09/19/2006 7:26:26 PM PDT by ChildOfThe60s (If you can remember the 60s...you weren't really there.)
[ Post Reply | Private Reply | To 18 | View Replies]

To: EGPWS

IE more user friendly? Only when it is run in the default set-up: With every security risk wide-open.


48 posted on 09/19/2006 7:26:37 PM PDT by TheBattman (I've got TWO QUESTIONS for you....)
[ Post Reply | Private Reply | To 6 | View Replies]

To: EGPWS

A lot of times "user friendly" is really just what we are habitually accustomed to. And even still, the few things in FF that require an extra step, well, I figure it is a reasonable price to pay for all the other aspects that are superior.


49 posted on 09/19/2006 7:31:06 PM PDT by ChildOfThe60s (If you can remember the 60s...you weren't really there.)
[ Post Reply | Private Reply | To 6 | View Replies]

To: potlatch


WebTV has no viruses, worms, trojans, popups

Amazing a dinky inexpensive unit by MSFT can ignore them

But expensive PCs require lots of fun stuff, firewalls, screens, security software

Makes one wonder

Do PC users enjoy the pain?

If they are so great why is a WebTV immune?





50 posted on 09/19/2006 7:46:30 PM PDT by devolve
[ Post Reply | Private Reply | To 44 | View Replies]

To: bigdcaldavis
Only idiots or masochists still use IE

Oh, beat me.

51 posted on 09/19/2006 7:47:14 PM PDT by VeniVidiVici (Rabid ethnicist.)
[ Post Reply | Private Reply | To 3 | View Replies]

To: rocksblues
As many on line applications only accept IE as their default I would like to know how you would allow them to accept Fire fox.

This generally works with most sites.

52 posted on 09/19/2006 7:47:58 PM PDT by Calvinist_Dark_Lord (I have come here to kick @$$ and chew bubblegum...and I'm all outta bubblegum! ~Roddy Piper)
[ Post Reply | Private Reply | To 5 | View Replies]

To: devolve
DEVOLVE SAYS;


53 posted on 09/19/2006 7:50:25 PM PDT by potlatch (Does a clean house indicate that there is a broken computer in it?)
[ Post Reply | Private Reply | To 50 | View Replies]

To: Eagle9
To really make these alerts effective they should post very detailed information on how to use the exploits.

That would really light a fire under their asses!
54 posted on 09/19/2006 7:53:34 PM PDT by KoRn
[ Post Reply | Private Reply | To 1 | View Replies]

To: devolve

Small target. I don't imagine that there are many webtv boxes out there, so hackers/crackers spend their time going after a larger user base.


55 posted on 09/19/2006 7:58:20 PM PDT by Tree of Liberty (Islam delenda est)
[ Post Reply | Private Reply | To 50 | View Replies]

To: Wuli
Not only is Firefox minus the MS security bugs, it was faster than IE from the first day.

I agree. But since 1.5.0.7, I've lost any obvious way to uninstall it. It doesn't show up in Add/Remove programs and the uninstall in the program folder doesn't do anything.

56 posted on 09/19/2006 7:59:46 PM PDT by Stentor
[ Post Reply | Private Reply | To 4 | View Replies]

To: potlatch

Ah!

The old <marquee> tag effect!

57 posted on 09/19/2006 8:00:01 PM PDT by devolve
[ Post Reply | Private Reply | To 53 | View Replies]

To: devolve

Only effective - if it works [the words!]

I am posting YOUR gifs tonight!!


58 posted on 09/19/2006 8:03:28 PM PDT by potlatch (Does a clean house indicate that there is a broken computer in it?)
[ Post Reply | Private Reply | To 57 | View Replies]

To: rocksblues
As many on line applications only accept IE as their default

And those are the ones I don't use. I've blown off many online stores since their sites only worked in IE, even though they had what I want. About the only things I use IE for are Windows Update and managing Virtual Server.

59 posted on 09/19/2006 8:05:13 PM PDT by antiRepublicrat
[ Post Reply | Private Reply | To 5 | View Replies]

To: Tree of Liberty


I've got IE and a Mozilla browser.

Between WebTVs & the newer MSFT MSN-TVs [no great TV goodies on the new units] there are many out there now.

The RCA WebTV "Plus" running with DirecTV and a really good vintage amp and speakers [huge Marantz here] spends not one second or one penny on security, scans, software, rebooting, etc.

On a large TV it beats the PCs and the wireless keyboards and remotes let you move around or surf, email from distances in comfort.

I use two TVs at once.

MSN sez it cannot be done.

O'Reilly rerun on FNC right now -

--

Hackers/crackers need to watch out

We can do some unusual things with these El Cheapo gizmos

My index or default pages ususually send them to the FBI site to grab a few tasty cookies there


Or shuts down their toys











60 posted on 09/19/2006 8:14:22 PM PDT by devolve
[ Post Reply | Private Reply | To 55 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-8081-95 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson