CVE-2015-2502

Fast moving blackhats backdoor church-goers.

Hackers are already using an Internet Explorer vulnerability disclosed this week to hack members of an evangelical church. The attackers compromised the website of the Evangelical Lutheran Church of Hong Kong, injecting a malicious iFrame that redirects the faithful to a malicious website sporting the Internet Explorer vulnerability (CVE-2015-2502). More javascript redirections lead to the PlugX (pdf) malware landing on machines. Once running, the malware opens a back door and begins harvesting ...

IE 7 through 11 needs a big band-aid, fast, especially workstations, terminal servers

Microsoft has released an out-of-band patch for Internet Explorer versions 7 through 11, to close a dangerous remote code execution flaw allowing attackers to commandeer machines. The attack will be a highly useful tool in hacker arsenals likely allowing them to build powerful phishing, watering hole, and malvertising campaigns. Redmond's new Edge browser is not impacted. "The vulnerability (CVE-2015-2502) could allow remote code execution if a user views a specially crafted webpage using Intern...