A new security vulnerability is being tracked that targets PCs, and this time getting infected is as simple as downloading a graphic:
When visitors to a few particular Web sites – including popular auction, shopping and price-comparison sites – request pages that include the malicious graphics, the code automatically downloads itself onto their machines. Once installed, the code unpacks itself and loads a keystroke logger on the PC.
I’m a little annoyed by this article, actually, because in common eWeek fashion, you’re given enough information to freak out, but nothing useful to find out more info. For example, it mentions that Internet Exporer is vulnerable, but doesn’t really answer whether other browsers likle Mozilla are affected. Is there a patch being devloped or does it already exist? Are virus scanning programs already on the lookout for this thing yet? How can you find out if you’ve been infected? And specifically what “popular auction, shopping and price-comparison sites” is this article referring to? GRRR!
Also, no other news site seems to be giving this one much attention, so I’m a little skeptical. I’ll keep an eyes out and if more info pops up, you’ll see it here.
UPDATE: A little bit more info can be found on CNN’s site. It seems to be spreading from websites running IIS. I’m just glad I switched to Apache, heh. 🙂
1 response