New IE Malware Captures Passwords Ahead Of SSL

Ken Treis writes "SANS Internet Storm Center is reporting on a new strain of IE Malware. This one targets bank customers, which in itself is nothing new. But the catch is in the way it does it: it installs a Browser Help Object (BHO) that can capture login information before it is encrypted, and 'watches for HTTPS (secure) access to URLs of several dozen banking and financial sites in multiple countries.'."

Comments

How long

[Harbinjer]

this seems like its a pretty big deal. Good thinking by the author, he should be complimented, then put away.

how long will it take for everyone to switch to firefox? I sure hope its happening.

Gah!

[Solar Limb]

How many time does it have to be said? DON'T USE IE. Period. End of story. Fin.

Re:"New IE Malware"

[TrekCycling]

HAHAHAHAHA

Mod this up!!!

Here is how to get rid of BHO's

[JavaLord]

I posted this in another thread, but for those of you who don't know, you can get rid of BHO's with BHO Demon .

I run ad-aware and Spybot search and destroy but BHO Demon found some crapware that neither adaware or spybot found.

Re:OK, I'll take the bait

[mrbcs]

Here, Here!!! Good reply. I.E. Sucks and is responsible for 95% of the web's virii.