Web Site Attacks Against Unpatched IE Flaw Spike

Posted by ryuzaki0 on Monday March 27, 2006 @06:29AM from the not-a-good-spike dept.

An anonymous reader wrote to mention a Washingtonpost.com article about an increase in attacks against IE users via a critical, unpatched flaw. The bug allows software to be downloaded to the vulnerable PC even if the only act the user takes is browsing to a web site. From the article: "[A] password-stealing program landed on the Windows PC belonging to Reaz Chowdhury, a programmer for Oracle Corp. who works out of his home in Orlando, Fla. Chowdhury said he's not sure which site he browsed in the past 24 hours that hijacked his browser, but he confirmed that the attackers had logged the user name and password for his company's virtual private network (VPN)."

1 of 268 comments (clear)

Re:"... said he's not sure which site he browsed.. by cyber-vandal · 2006-03-27 18:29 · Score: 0, Troll

Yes because Windows is marketed at the users who would know how to do this. Fixing IE would be a better idea or encouraging them to move away from it altogether to Opera or FF (haha I'd love MS to advise that).
And don't get me started on MS Word, some of the bugs in 2002 are an absolute disgrace.