Friday, January 15, 2010

Microsoft's Internet Explorer used in attack on Google



Microsoft said in a blog post on Thursday that that a vulnerability in Internet Explorer could allow hackers (black hats) to remotely run programs on infected machines. 

The corporation is still working on a formal software update but has given some guidance on mitigating the problem.

Mike Reavey, director of security response said "Based upon our investigations, we have determined that Internet Explorer was one of the vectors used in targeted and sophisticated attacks against Google and possibly other corporate networks,"

"Unfortunately cyber crime and cyber attacks are daily occurrences in the online world. Obviously, it is unfortunate that our product is being used in the pursuit of criminal activity. We will continue to work with Google, industry leaders and the appropriate authorities to investigate this situation." 

Microsoft also stated that it "has not seen widespread customer impact, rather only targeted and limited attacks exploiting Internet Explorer 6". 

Security firm McAfee told news agency AFP that the attacks on Google, which targeted Chinese human rights activists worldwide, showed a level of sophistication above that of typical, isolated cyber criminal efforts.

McAfee's vice-president of threat research Dmitri Alperovitch told AFP that although the firm had "no proof that the Chinese are behind this particular attack, I think there are indications though that a nation-state is behind it".

No comments:

Post a Comment