Hacker exposes phishing hole in IE7
by DJ Neawedde | 23rd February 2007
A newly found flaw in Internet Explorer 7 lets you mask the display of the current website, and get around IE7’s phishing filter. Both Windows XP and Windows Vista operating systems are affected according to Michal Zalewski, the guy who uncovered the flaw.
Microsoft says they’re still working on an internal assessment of the reported hole. Zalewski has provided a demo to allow people to test the flaw.
More via heise Security and Secunia
Subscribe
This is not a phishing exploit. First you need to get the person to visit a dangerous web site.
Then you have to get the person to go to the site you want to phish by typing the address into their address bar instead of doing what is “normal”, that is, clicking on a hyperlink in a Web page.
THe vulnerability works, but only if you get people to act outside the norm.
February 23rd, 2007 at 9:55 pm