Alternative browser spyware infects IE

[egghead]

Some useful citizen has created an installer that will nail IE with spyware, even if a surfer is using Firefox (or another alternative browser) or has blocked access to the malicious site in IE beforehand. The technique allows a raft of spyware to be served up to Windows users in spite of any security measures that might be in place.

Christopher Boyd, a security researchers at Vitalsecurity.org, said the malware installer (http://www.vitalsecurity.org/2005/03/firefox-spyware-infects-ie.html) was capable of working on a range of browsers with native Java support. "The spyware installer is a Java applet powered by the Sun Java Runtime Environment, which allows them to whack most browsers out there, including Firefox, Mozilla, Netscape and others. In the original test, only Opera and Netcaptor didn't fall for the install but Daniel Veditz, who is the head of Mozilla security, has since confirmed to me that this will also work in Opera and Netcaptor," he explained.
\


http://www.theregister.co.uk/2005/03/11/alternative_slimeware/


lovely:eek:
egghead

[rik]

Gotta love it...

[cash_site]

nice one, must be a clever dude :rollseyes:

[Curio]

more detail at http://www.edbott.com/weblog/archives/000562.html

Moderators - is it allowed/reasonable to post a link to where this exploit actually is?

[Conan]

more detail at http://www.edbott.com/weblog/archives/000562.html

Moderators - is it allowed/reasonable to post a link to where this exploit actually is?

Will it infect everyone who visits it?

[Curio]

You don' get infected unless you click yes in the dialog but you will see some hard disk activity when the exe file is downloaded to your system when the page loads - this may trigger some AVs but when I did it I was using Xandros so I wasn't worried anyway. I have since found another link which does some different exploits and crashes I.E. but bitdefender caught all that and prevented the exploit from completing - this is on an otherwise unprotected Windows ME system. Perhaps posting them in a seperated format so you have to reconstruct the link would be nice for interested people, if only to add them to your block list.

[Curio]

Here is the iframe exploit that will crash Firefox - it doesn't do any harm I just thought it might interest people to actually experience the exploit and see what happens.

http://www.active-bait.co.uk/crashmozilla.htm - warning! if you click it using firefox then your firefox will crash

[FastGame]

warning! if you click it using firefox then your firefox will crash
Yep it blew my Firefox to pieces :p

That proves how safe FF is, it will die in order to save its master ;)