Results 1 to 8 of 8

Thread: Alternative browser spyware infects IE

  1. #1
    Precision Processor Super Moderator egghead's Avatar
    Join Date
    May 2002
    Location
    In Your Monitor
    Posts
    3,546

    Alternative browser spyware infects IE

    Some useful citizen has created an installer that will nail IE with spyware, even if a surfer is using Firefox (or another alternative browser) or has blocked access to the malicious site in IE beforehand. The technique allows a raft of spyware to be served up to Windows users in spite of any security measures that might be in place.

    Christopher Boyd, a security researchers at Vitalsecurity.org, said the malware installer was capable of working on a range of browsers with native Java support. "The spyware installer is a Java applet powered by the Sun Java Runtime Environment, which allows them to whack most browsers out there, including Firefox, Mozilla, Netscape and others. In the original test, only Opera and Netcaptor didn't fall for the install but Daniel Veditz, who is the head of Mozilla security, has since confirmed to me that this will also work in Opera and Netcaptor," he explained.
    \


    http://www.theregister.co.uk/2005/03...ive_slimeware/


    lovely
    egghead
    ------------------------------------------------------------



  2. #2
    Old and Cranky Super Moderator rik's Avatar
    Join Date
    Aug 2003
    Location
    Watching Your every move...
    Posts
    4,688
    Gotta love it...

  3. #3
    Security Intelligence TZ Veteran cash_site's Avatar
    Join Date
    Jul 2002
    Location
    Software Paradise
    Posts
    3,852
    nice one, must be a clever dude :rollseyes:

    --- 0wN3D by 3gG ---

  4. #4
    Triple Platinum Member Curio's Avatar
    Join Date
    Nov 2004
    Location
    London
    Posts
    899
    more detail at http://www.edbott.com/weblog/archives/000562.html

    Moderators - is it allowed/reasonable to post a link to where this exploit actually is?
    Last edited by Curio; March 19th, 2005 at 08:05 AM.
    I'm using Windows 7 - you got a problem with that?

  5. #5
    Techzonez Governor Super Moderator Conan's Avatar
    Join Date
    Apr 2002
    Location
    Philippines
    Posts
    4,343
    Quote Originally Posted by Curio
    more detail at http://www.edbott.com/weblog/archives/000562.html

    Moderators - is it allowed/reasonable to post a link to where this exploit actually is?
    Will it infect everyone who visits it?

  6. #6
    Triple Platinum Member Curio's Avatar
    Join Date
    Nov 2004
    Location
    London
    Posts
    899
    You don' get infected unless you click yes in the dialog but you will see some hard disk activity when the exe file is downloaded to your system when the page loads - this may trigger some AVs but when I did it I was using Xandros so I wasn't worried anyway. I have since found another link which does some different exploits and crashes I.E. but bitdefender caught all that and prevented the exploit from completing - this is on an otherwise unprotected Windows ME system. Perhaps posting them in a seperated format so you have to reconstruct the link would be nice for interested people, if only to add them to your block list.
    I'm using Windows 7 - you got a problem with that?

  7. #7
    Triple Platinum Member Curio's Avatar
    Join Date
    Nov 2004
    Location
    London
    Posts
    899
    Here is the iframe exploit that will crash Firefox - it doesn't do any harm I just thought it might interest people to actually experience the exploit and see what happens.

    http://www.active-bait.co.uk/crashmozilla.htm - warning! if you click it using firefox then your firefox will crash
    I'm using Windows 7 - you got a problem with that?

  8. #8
    Hardware guy Super Moderator FastGame's Avatar
    Join Date
    Apr 2002
    Location
    Blasters worm farm
    Posts
    3,416
    warning! if you click it using firefox then your firefox will crash
    Yep it blew my Firefox to pieces

    That proves how safe FF is, it will die in order to save its master

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •