Exploit for Un-patched IE Vulnerability Now Part of Crimeware Kit

According to security researchers, an exploit, which takes advantage of a yet-to-be-patched security flaw in Internet Explorer, is now part of a well-known kit for crimeware. Computerworld.com reported this on November 8, 2010.

Cyber-criminals, during the 1st week of November 2010, connected the flaw that Symantec the security company discovered with one backdoor Trojan called Pirpi. But, according to researchers at FireEye, attackers are also using Hupigon another PC Trojan.

Said Senior Security Researcher Atif Mushtaq at FireEye, currently Hupigon was proliferating via drive-by assaults while essentially using the zero-day vulnerability in IE for contaminating systems. EWeek.com published this on November 8, 2010. Mushtaq added that previously Hupigon was also observed as proliferating via social engineering techniques that involved free cracks, shareware/freeware software, keygens, as well as other techniques.

More: http://www.spamfighter.com/News-15409-Exploit-for-Un-patched-IE-Vulnerability-Now-Part-of-Crimeware-Kit.htm