Slashdot Mirror

← Back to Stories (view on slashdot.org)

New Phishing Flaw in Internet Explorer

Posted by ryuzaki0 on from the another-week-a-new-vulnerability dept.

JimmyM writes "Secunia reports on a new vulnerability in Internet Explorer. From the piece: 'This can be exploited to spoof the address bar in a browser window showing web content from a malicious web site.' According to several (german) media outlets this is already being exploited by phishing sites. Secunia has a test you can try to see if you are vulnerable."

16 of 274 comments (clear)

  1. Test I can try? by stunt_penguin · · Score: 5, Funny

    1. Look up in top left hand corner of browser.
    2. If icon is a blue 'e' then you're vulnerable.

    That is all.

    /ms troll

    --
    When the posters fear their moderators, there is tyranny; when the moderators fears the posters, there is liberty.
    1. Re:Test I can try? by jammindice · · Score: 2, Funny

      Not even the beta IE 7 i have is working right, thank god firefox tested good, otherwise i might have to switch to lynx!!!

      --
      - My uid ends in 69...
  2. In other news by Anonymous Coward · · Score: 0, Funny

    Water is wet.

  3. Confirmed vulnerable by paulproteus · · Score: 2, Funny

    I tested this attack in Internet Explorer 6 on Ubuntu 5.10 running the current Wine deb from winehq.

    --
    |/usr/games/fortune
  4. Your Slashdot Login Information by eno2001 · · Score: 3, Funny

    Warning. Your Slashdot login information may have been compromised by a sly fox. To ensure greater security please reply to this comment with your current UID and password and the new password you want. I'll be sure to forward it off to CmdrTaco as soon as I see a response.

    Thanks,
    Internet Security Sheriff

    --
    -"...bad old ideas look confusingly fresh when they are packaged as technology" - Jaron Lanier (Digital Maoism on Edge.o
    1. Re:Your Slashdot Login Information by Anonymous Coward · · Score: 1, Funny
      Anonymous Coward

      ********

  5. Ga! by MightyMartian · · Score: 4, Funny
    New Phishing Flaw in Internet Explorer

    I'm shocked, I tell you, I'm shocked!

    --
    The world's burning. Moped Jesus spotted on I50. Details at 11.
    1. Re:Ga! by madnuke · · Score: 3, Funny

      It dosnt work in Firefox :P so much for browser compatiabilty.

  6. Umm... by atrader42 · · Score: 2, Funny

    When I run IE, the icon in the top left is an arrow pointing left...does that mean I'm ok and Paypal really does need me to confirm my account details several times a day?

  7. What? by snib · · Score: 4, Funny

    This doesn't work in Firefox. I hate it when people only design their pages for IE!!

    --
    This message will self-destruct in 5, 4, 3...
  8. Looks like I'm secure by m50d · · Score: 5, Funny

    I tried to open the test page in Konqueror and it crashed. I wish I was joking :(

    --
    I am trolling
  9. Good Grief by rAiNsT0rm · · Score: 3, Funny

    The other day I sent out an email to everyone in our company warning them of a new phishing scheme with a copy of the email attached. Within 10 minutes I had not one, but TWO replies to me with people's account/password info.

    So not only did they miss the entire message, they also couldn't even give their information to the right person. I wanted to just cry... I honestly think phishers deserve some peoples information.

    --
    http://teasphere.wordpress.com - A little spot of tea
  10. Here you go by Dr.+Evil · · Score: 2, Funny

    Dr. Evil, blah2glorb

  11. Remember January 15th, 2002, by dpbsmith · · Score: 2, Funny

    when in an internal memo, Bill Gates said "We must lead the industry to a whole new level of Trustworthiness in computing."

    Remind me, again... how many major OS releases and services packs and IE versions have been released since then?

    --

    "How to Do Nothing," kids activities, back in print!

  12. Boot Camp by AragornSonOfArathorn · · Score: 2, Funny

    I'm running IE on my new MacBook via Boot Camp. But since Macs don't get viruses, I'm safe, right?

    --
    sudo eat my shorts
  13. Re:Why?? by Xerp · · Score: 2, Funny

    I often download the internet and put it onto someones hard disk for them.

    I still have people calling their computer the "hard disk". People who know nothing are still trying to sound vaguely competant by saying "my hard disk is broken". Of course, saying this to someone with 1 point more tech-savvy than then just ends up confusing the poor person... as they actually believe the person.

    So. Whats the easiest way to get these technophobes to switch to firefox? Lets see... make it as a flashy banner ad, spyware-style and they'll install it no time!! ^^