It's not clear if the latest Internet Explorer patches are able to protect users' systems from becoming infected. Internet security firm Symantec's DeepSight Threat Alert says IE users are being infected through a known, but still unpatched, Internet Explorer flaw.
Syamantec's BugTraq ID for the flaws are 10472 and 10473. More information about these flaws are available at http://www.securityfocus.com/bid/10472 and http://www.securityfocus.com/bid/10473 .
Security experts have been studying the attack and are unclear about the motive behind it. Some say the attacks can be traced to a Russian Web IP address of known spammers; others say the attack is designed to steal consumers' financial information.
Daniel J. Frasnelli, manager of the technical assistance center for managed security services provider NetSec, says it started monitoring the attack activity early Thursday and immediately notified its security customers.
NetSec wouldn't disclose the names of the E-commerce sites under attack, citing legal fears, but Frasnelli said infected sites include a major auction site, an auto-pricing site, and search-engine sites. "We all know these sites," he says.
Discover the benefits of scalable backbone and network services for application and cloud providers.
Network automation is gaining momentum. Here's how you can drive this powerful technology to its full potential.
Subsea cable alternatives can provide a level of comfort for those concerned about disruptions. Realistically, they will continue to play a small, but critical role in the short term.
