Another IE/Windows vulnerability abused by phishers

Slashdot points out to a new vulnerability in Windows.

Simply opening the email is enough to activate a script which 'lies in wait for its victim' according to one report. The script rewrites the host files of the machine and directs users to a fake web page the next time they legitimately attempt to access an online banking page. ... However, this will only affect users who have Windows Scripting Host enabled and certain ActiveX controls, according to MessageLabs.

Posted by Eric at November 3, 2004 03:38 PM | TrackBack