IE bug being exploited through Word documents

IE bug being exploited through Word documents

Security analysts are warning that hackers are now using MS Word files to make use of the bug in Internet Explorer web browser that was just patched by Microsoft through an emergency update.

David Marcus, the director of security research and communications for McAfee Avert Labs said in a note: “Inside the document is an ActiveX control, and in that control is a line that makes it call out to the site that’s hosting the malware.”

He added: “This is a pretty insidious way to attack people, because it’s invisible to the eye, the communication with the site.”

These malicious documents can be delivered to potential victims through email attachments.

Researchers are also warning that thousands of legitimate websites are now hacked to target innocent victims using the same vulnerability in Internet Explorer.

Windows users should get that patch as soon as possible if they have not yet updated their installations.

Checkout: Microsoft Security Bulletin MS08-078 – Critical