Internet Explorer 7 Records Huge Increase In Hacking Attacks

Microsoft Corp. has tipped off its users of a “huge increase” in hacking attacks exploiting a critical unpatched vulnerability in some versions of its flagship web-browser Internet Explorer (IE), and notified that some of these attacks have originated from hacked porn websites. 

In addition to IE7, other versions like IE 5 and IE 6 have also been found to be vulnerable to the flaw, which on proper exploitation could enable a hacker to seize complete control over victim’s computer, the company added. 

The flaw essentially originates from the improper handlings of DHTML data bindings due to a memory corruption error.  Though the hackers have been exploiting the vulnerability for more than a week, the company notified an upswing in attacks over the weekend. 

Researchers Tareq Saade and Ziv Mador in one of their postings on Malware Protection Center blog said, “Based on our stats, since the vulnerability has gone public, roughly 0.2 percent of users worldwide may have been exposed to websites containing exploits of this latest vulnerability”. 

The researchers purported that the hackers have now changed their methodology of attacks, as instead of using malicious websites for attacks, they are now using compromised legitimate websites to trick the users. 

Incidentally Trend Micro Inc has estimated that around 6,000 websites have been infected so far to exploit the vulnerability, with the count “quickly increasing in number”. 

Go To Page 2 for our comments and more related links

Our Comments

Another day, another security warning for browsers. We heard about the dismal performance of browsers when it came to management yesterday. Today it is about Microsoft's unpatched vulnerability. Nothing much can be done at this stage. Users just need to be extra careful.

Related Links

Microsoft sees 'huge increase' in IE attacks

(Computer World)

Microsoft sees "huge increase" in IE attacks

(PC Pro)

MS issues brown alert over unpatched IE 7 flaw

(Channel Register)

Internet Explorer flaw worse than thought

(Vnunet)

Serious flaw in Internet Explorer not fixed yet

(Associated Press)

All Internet Explorer users could be at risk, warns Microsoft

(Computer Weekly)

Another wave of attacks target Internet Explorer

(IT Pro)

Internet Explorer security alert

(BBC)