Thursday, January 29, 2004

Hackers capitalizing on Mydoom's success. A back door to computer systems opened by the Mydoom e-mail worm is turning into a bonanza for thousands of hackers, who are scanning the Internet furiously for systems infected by Mydoom, antivirus experts said Wednesday.[InfoWorld: Top News]
8:30:07 AM    

Microsoft to Change IE Behavior to Block Spoofing Attacks. http://username:password@server/file.html syntax to be disallowed by an upcoming software update. Problematic feature was recently made more dangerous by the unveiling of a display bug in browser. [eWEEK Technology News]
8:22:54 AM    

MyDoom Sequel Has A Twist . A new variant of the MyDoom worm is wired to launch a denial-of-service attacks against the web sites of Microsoft and the SCO Group, and may be using computers infected with MyDoom.A to help itself spread. [InternetWeek]
8:22:02 AM    

Security firm warns of new IE flaw. A security services company points out a new vulnerability in Microsoft's Internet Explorer Web browser that could allow Web surfers to be tricked into downloading malicious files. [CNET News.com - Front Door]

This appears to be the same flaw discovered some three years ago but not yet fixed.  Combined with the flaw revealed last year but not yet patched, a bad guy could trick you into visiting a site that wasn't what you expected and get you to download a file that you don't want.  Not good.


7:38:27 AM    

MyDoom Variant Continues to Cause Confusion. UPDATED: Russian anti-virus specialist Kaspersky Labs has identified a variant of MyDoom, the worm that has been spreading through the Internet at a furious pace since Monday. [eWEEK Technology News]
7:34:14 AM