Slashdot Mirror

← Back to Stories (view on slashdot.org)

Corporate Servers Spreading IE Virus [Updated]

Posted by CowboyNeal on from the ill-and-infectious dept.

uncadonna writes "ZDNet is reporting that corporate web servers are infecting visitors' PCs. The combination of two unpatched IE security holes and hacked corporate websites is apparently distributing malware via several high-credibility sites. ZDNet says users have 'few options' other than alternative browsers or platforms." Update: 06/25 14:50 GMT by J : A reader points out Microsoft's What You Should Know page. Here's the short version for avoiding this Critical severity attack: you must install add-on software, and change multiple settings in multiple programs, thus causing "some Web sites to work improperly." By changing more settings, you can regain functionality for a particular site if "you trust that it is safe to use," which you have no way of knowing. Or try Firefox. Update: 06/25 19:30 GMT by J : Reuters reports the attack installs a keysniffer which can steal credit card numbers, passwords, and so on. The story offers safety tips, but fails to mention that, after patching the hole, many users will be infected without their knowledge. Shouldn't the "fix" include ceasing to type anything important into your computer until you purchase software which can detect and remove the Trojan? And will you be downloading that software with Mastercard or Visa?

4 of 1,028 comments (clear)

  1. Re:Wonder How Microsoft Will React by Creosote · · Score: 1, Offtopic

    What I have always done is download Firefox, change the icon to the blue E, and rename the shortcut "Internet Explorer". I then tell them, "It's the new version of Internet Explorer, called Mozilla."

    I have had no people complain or ask to have the "old" version back. In fact, the only thing I have heard is praise ("It's so fast", "I don't get pop-ups anymore", etc).

    You know, if the Kerry campaign could figure out a way to adapt this strategy to replace GWB, we might have a pretty painless transition come November.

  2. Fire Ashcroft for great justice. by Doc+Ruby · · Score: 0, Offtopic

    The waves of viruses spamming Americans (and Netizens in general) for the last months and years have been perpetrated largely by organized crime gangs. Americans pay a bundle in taxes (and compromised freedoms) each year for an FBI to protect us from that kind of predation. If John Ashcroft's Justice Department won't protect us from the Microsoft monopoly that offers fertile ground for these attacks, it should at least protect us from the crooks that sow it. But of course that doesn't fit Ashcroft's apocalypse agenda. He's got to go, and the rest of his inJustice Department's inverted priorities with him.

    --

    --
    make install -not war

  3. Re:Wonder How Microsoft Will React by Botunda · · Score: 0, Offtopic

    True. I mean, there isn't much difference between the two when you get right down to it.

    Man... I can just feel the flamebait mods hitting me right now.

  4. Re:How to tell and Fixes by Azghoul · · Score: 0, Offtopic

    Oooo ahh, an AC tries to insult me by calling me dense. As opposed to air-headed, which any IIS-using, IE-forcing moron, I suppose.

    And good job, whoever did mod my post redundant. Now that shit's funny. :)