New zero-day bug targets IE users in drive-by attack

Security researchers at FireEye have warned of new zero-day vulnerabilities in versions of Internet Explorer that are being actively exploited to infect computers in drive-by attacks. The researchers call the attack "the diskless 9002 RAT (Remote Access Trojan)". This specific trojan is a variant of the earlier Trojan.APT.9002. "Diskless" means the threat is much harder to identify through forensic methods. It also means that attack may not live in the system long enough to accomplish its goal.

"The exploit targets the English version of Internet Explorer, but we believe the exploit can be easily changed to leverage other languages," FireEye researchers Xiaobo Chen and Dan Caselden wrote. "Based on our analysis, the vulnerability affects IE 7, 8, 9 and 10."

FireEye says it has notified Microsoft's security team of the vulnerability, and it is to be hoped that a patch is forthcoming sooner rather than later. In the meantime, companies can protect their systems by installing the latest version of Microsoft EMET.

Read more -here-

• Dropbox breach exposes customer credentials, authentication data
• Google: Passkey authentications top 1 billion across 400 million accounts
• FTC fines Razer for misrepresenting COVID masks as N95s
• FCC fines Verizon, AT&T other major carriers nearly $200 million for sharing customer data
• Federal regulators accuse Amazon executives of deleting messages
• FCC restores net neutrality rules