Privacy, Security & Virus Information

IE Still Under Attack, but from an Old Enemy

With Microsoft hot from releasing an emergency patch on Thursday 19th January designed to repair a zero-day vulnerability that caused Google and more than 30 other companies to be hacked in the so-called Aurora attacks, an older problem has reared its ugly head which looks like it will represent further woe for Internet Explorer (IE).

Information has reached Microsoft that versions of Internet Explorer could inadvertently allow hacker entry to a computer's hard disc and allow them to access files on the computer. Apparently Microsoft was made aware of the problem as long ago as 2008 and despite two attempts by Microsoft to fix it two years ago, the problem seems unwilling to go away. The virus is not so sophisticated and doesn't allow the hacker to install other codes on a person's computer. Despite that fact, the presence of this glitch has to be regarded as a serious breach of security, affecting all of Microsoft's operating systems, including their latest IE8.

The hacker operates by duping a victim into clicking on a heavily disguised malicious Uniform Resource Locator (URL). The URL is created by manipulating four or five features in Internet Explorer; if the hacker succeeds in drawing a computer owner or user into his web, the browser will process files that are not pure HTML on the computer.

Despite the fixes carried out in 2008, hackers continue to find ways to pull off the same attack. Hopes are that when Microsoft’s next batch of patches is released on Feb. 9 the company will have come up with a solution to the problem by then.

In the meantime, if you come across a link that looks suspicious, you should stay clear. If you click on the URL you might find yourself on a web site that is an exact replica of the one that wanted to link onto it, but is instead an attempt to access private information and introduce a series of viruses into your computer.

 

< Back