Attackers zero in on Yahoo Jukebox\’s ActiveX flaw
Just one day after hackers showed how to exploit a number of flaws in the ActiveX software used by Internet Explorer, Symantec has spotted online criminals using one of the attacks.
The attack, which was first observed in the last few hours, is not widespread at present. Symantec Security Response Director Oliver Friedrichs said Tuesday that the company had identified just three Web sites that were hosting the attack code, all of which seem to be linked to the same criminals. But he believes that more attacks are inevitable as the bad guys work the code into their malicious toolkits of software. “Given the fact that the proof of concept is available and works, …
See original here:
Attackers zero in on Yahoo Jukebox\’s ActiveX flaw