Trojan Exploits Unpatched IE Flaw

onebuttonmouse writes "The Register reports on a trojan spotted in the wild that takes advantage of the so-far unpatched IE vulnerability mentioned on Slashdot earlier this week. From the article: 'The release of a Trojan that exploits an unpatched IE hole has prompted speculation that Microsoft may release an emergency out-of-cycle security patch. Delf-DH downloads other malware onto infected machines changing settings in order to monitor user activity and redirect surfers onto porn sites. The attack relies on a flaw in the way IE handles requests to the window() object.'"

Comments

Re:disable active scripting ...

[tehshen]

Disable what? Enable what? IE should be secure, I shouldn't need to work around it.

One Care Live

[VisceralLogic]

Maybe they're selling the fix through the new anti-virus software?

Re:Fix just came out.

[Crayon Kid]

Unfortunately, Firefox 1.5 is also affected by the bug. Granted, it only freezes up and has to be killed manually, so it's not as severe as remote code execution. Still...