News [Security]

[metadigital]

News [security]

Monday 3rd April 2006

 

BBC used as lure for unpatched IE exploit 10:25AM

Snippets of BBC news stories are being used to lure Internet users into installing a damaging Trojan on their computer it has emerged. Emails containing the 'news' stories end with an invitation to 'read more', which takes the reader to a malicious website and installs software to monitor their visits to banking websites and other financial institutions.

The keylogger Trojan exploits the unpatched 'Create TextRange' flaw in Internet Explorer which has been rated as 'highly critical' by security firm Secunia.

People who receive the spam emails purporting to be BBC news are warned not to follow the links. 'We have had people creating spoof pages of our site before,' commented Steve Herrmann, editor of the BBC News website. 'But using them in this way to attack people's online security is particularly troubling to us and a cause for serious concern.'

Microsoft has announced that it plans to patch the vulnerability in the next security update due on 11 April. However, with all versions of Internet Explorer from Windows 2000 onwards - including the latest Internet Explorer 7 beta - vulnerable to the exploit, cyber criminals are clearly rushing to make hay while the security gap remains open.

reference

[Pidesco]

So that "reference" link will install a trojan on my computer? :D :ph34r:

[Lucius]

Was thinking the same thing... Meta is a naughty mod. :D

[Surreptishus]

As always people, don't open emails from people you don't know!

[Lucius]

On that note, stop spamming my inbox with **** enlargement mails Sur.

 

Oh c'mon, 'bleep' out the P word?

Edited April 5, 2006 by Lucius

[Surreptishus]

but you could "RIP HER APART!" and all you need is this special lotion:

 

 

Bona-Gro

[Lucius]

Didn't receive that one, I'd buy it.

[sega-soldier]

This reminds me of 'world news weekly' or what ever it was called,

Where some people used the exact BBC lay out

and made up completely unbleavable storys.

 

BBC is in my opinion the best place for news on the net,

when its not being messed about with.

[Hassat Hunter]

Not too long ago there was also a prank to get MSN-adresses/passwords etc. by using a BBC article.

 

Stupid people didn't notice the date (2001) though nor that the screens with the article showed a severly older MSN version quite different from the current

[metadigital]

Just be aware that the vulnerability won't be patched by Miscrosoft until next week (the eleventh).