Friday, October 3. 2003
IE Flaw Exploit via Banner Ads
There's a critical security flaw in all current versions of Internet Explorer, and there is currently no fix that actually closes the hole.
A Trojan Horse called QHosts has been found in the wild, specifically at FortuneCity.com, that displays a popup ad and installs the trojan. The code changes your DNS server, which can then be used later to start stealing passwords or other malicious acts.
For now, the DNS servers that QHosts referred to have been taken off the web, but this vulnerability still exists and will probably be exploited again.
Keep your anti-virus software up to date, and keep an eye out to see if Microsoft releases a new fix that will actually fix the flaw.
A Trojan Horse called QHosts has been found in the wild, specifically at FortuneCity.com, that displays a popup ad and installs the trojan. The code changes your DNS server, which can then be used later to start stealing passwords or other malicious acts.
For now, the DNS servers that QHosts referred to have been taken off the web, but this vulnerability still exists and will probably be exploited again.
Keep your anti-virus software up to date, and keep an eye out to see if Microsoft releases a new fix that will actually fix the flaw.
Trackbacks
Trackback specific URI for this entry
No Trackbacks