'State-sponsored attackers' using IE zero-day to hijack GMail accounts

[Night Hawk]

'State-sponsored attackers' using IE zero-day to hijack GMail accounts

By Ryan Naraine

June 13, 2012, 9:36am PDT


Summary: Microsoft’s advisory speaks of “active attacks” and follows a separate note from Google that references the IE flaw “being actively exploited in the wild for targeted attacks.”


Microsoft and Google have separately warned about a new Internet Explorer zero-day being exploited to break into GMail accounts.


The browser flaw, which is currently unpatched, expose Windows users to remote code execution attacks with little or no user action (drive-by downloads if an IE users simply surfs to a rigged site).

see full report

 

[tom982]

'State-sponsored attackers' using IE zero-day to hijack GMail accounts

By Ryan Naraine

June 13, 2012, 9:36am PDT


Summary: Microsoft’s advisory speaks of “active attacks” and follows a separate note from Google that references the IE flaw “being actively exploited in the wild for targeted attacks.”


Microsoft and Google have separately warned about a new Internet Explorer zero-day being exploited to break into GMail accounts.


The browser flaw, which is currently unpatched, expose Windows users to remote code execution attacks with little or no user action (drive-by downloads if an IE users simply surfs to a rigged site).

see full report

Very interesting article

 

[Night Hawk]

It was certainly an eye catcher as far as the title! I doubt the real problem with certain sites is limited to just IE however! With the 64bit flavor of FireFox, WaterFox, simply clicking on a link when going to try out a new video player, video editing ware the new window automatically slammed a new toolbar on the browser which couldn't be removed easily!

Apparently the sites being warned about there have scripting that's far more complex in order to simply hijack IE 9 possibly the 10 beta now seen as well in the next version to come's Release Preview. A great addon for any browser however is the Web Of Trust(WOT) tool which rates individual sites when going to run a search for something and look to see which ones have a red dot next to them over those with either amber(unsure) or green(secure).