Internet Explorer hit by zero-day exploit

By admin | December 15, 2008

Internet Explorer 7 users have been exposed to a zero-day exploit that may have been accidentally let loose by Chinese security researchers.

The malware is expected to cause havoc over the Christmas period, according to several security companies.

Rick Howard, director of intelligence at iDefense Security Intelligence Services said the exploit was accidentally released by a Chinese security team on Tuesday — the same day Microsoft released a massive update — and has now been incorporated into exploit toolkits designed to install information-stealing Trojans.

“The IE7 zero-day is really nasty. No patch. Mitigation options are not good; some are draconian. Dig in folks; this could be a rough ride,” said Howard.

For advice on all your security needs please contact us

Topics: Security | No Comments »