Email Lures to VML Exploits

Email Lures to VML Exploits

September 25, 2006
"We are starting to see mass mailing lures for websites that are hosting VML exploit code. Most of the sites are using updated Web-Attacker code. A recent example that came to us from Message Labs appears to lure users to the site by claiming they have received a Yahoo! Greeting Card. The site downloads and installs an Internet Explorer Browser Helper Object that directs all HTTP posts from forms to a third party, and then collects information on end-users..."

http://www.websense.com/securitylabs...hp?AlertID=633

(Screenshots available at the URL)

IE 'VML hole' workaround
http://windowssecrets.com/comp/060922/#story1