Microsoft patched IE yesterday to fix the Aurora bug: it's already being attacked

[thewayne]

"The first widespread attack to leverage the Internet Explorer flaw that Microsoft patched in an emergency update Thursday morning has surfaced. By midday Thursday Symantec had spotted hundreds of Web sites that hosted the attack code. The attack installs a Trojan horse program that is able to bypass some security products and then give hackers access to the system, said Joshua Talbot, a security intelligence manager with Symantec. Once it has infected a PC, the Trojan sends a notification e-mail to the attackers, using a US-based, free e-mail service that Symantec declined to name."

I would find it so amusing, and not in the least bit surprising, to find out that the free e-mail service was Hotmail or Gmail.

Security is a bitch. Someone once said that the price of freedom is eternal vigilance, well, so is the price of security.

http://tech.slashdot.org/story/10/01/23/1429207/Widespread-Attacks-Exploit-Newly-Patched-IE-Bug?art_pos=3

Comments

[silveradept]

...that has to be headache-inducing at Microsoft. "We just patched it!" "Patch it again."