This is fricken scary

[morganlefay]

Usually, they will simply copy and paste a published exploit with their own payload. But, it looks like they are now reverse-engineering the patches themselves,"

http://www.eweek.com/article2/0,1895...06dtx1k0000599

geez.....clever little bastards...

At least they need the released patch first....gives us a little bit of a chance

MLF

[.:front2back:.]

In some cases, banner advertisements on Web sites can be used to deliver the payload to vulnerable, unpatched machines.

Scary, very Scary indeed.

none the less interesting article. something i know i will be keeping an eye on.

cheers
kris.!

[nihil]

Actually Morgana~ this has being going on for several years to my knowledge.

MS would issue a patch and malware would appear almost immediately to exploit unprotected systems. OK this wasn't skiddies, these people could decompile and analyse the fix. Naturally this is a lot easier than discovering the vulnerability yourself.

[Egaladeist]

So...the solution is???

[preacherman481]

I don't think there is any solution except to make sure you get patches installed as soon as they come out. The moral of this story is that laggards will suffer the consequences.

As far as the "Banner thing," it's good to stay away from dodgy web sites, but then again, even legitimate web sites have been commandeered for nefarious aims.