IE flaw allows Aussie bank scams
p2pnet.net News:- Speaking of Microsoft security flaws, the Australian Computer Emergency Response Team wants Gates’ company to fix an Internet Explorer flaw which reveals bank account details after internet banking sessions.
"The Australian Computer Emergency Response Team says users of internet banking are being targetted with seemingly legitmate e-mails from banks, urging them to click on a link," says an ABC news report here, going on:
"Senior Security Analyst, Jamie Gillespie, says clicking on that link allows a malicious programme to be installed which logs keystrokes" and "Whenever you go to a web-banking site and log in it will capture your user name and password". Gillespie says users are quickly taken to a real banking website and may not notice anything suspicious.
"What we’re looking for now is for Microsoft to be releasing the patch so that people can stay protected," he adds.
April 5th, 2004 at 7:52 pm
this does not look like an IE flaw – you can do the same with netscape too… you click on a link to download a program, it downloads no matter what browser you use…
April 5th, 2004 at 9:21 pm
Maybe they’re waiting for Microsoft to release a patch that fixes stupid user syndrome.
April 5th, 2004 at 9:54 pm
DON’t use IE!!! Opera works! Mozilla works! Firefox works!!
April 6th, 2004 at 12:33 am
Doesn’t seem to be an IE flaw, just a user who is not to bright with computers
April 6th, 2004 at 12:39 am
Yeah, it would have to be a patch that asks three questions to test user stupidity then lock everything up if you are too ignorant.
April 6th, 2004 at 2:46 am
first you need to open an email (that looks dubious especially if it comes from a bank you dont have an account with, as i have had such emails on my mail server)
which you sort using MAILWASHER first
then you have to have follow a link which then downloads a SPYWARE prrogramme which then tracks youe keystrokes
which you can usually choose not to download
all of which can be prevented doing computer housecleaning, automated virus checks, firewalls and ADAWARE or similar.
just what does the patch patch up?
so i agree with anon coward
its an OPERATOR vulnerability not a software fault
the user has to have some input
computers are not a universal tool you do need some intelligence
April 6th, 2004 at 4:39 am
If it were to lock everything how do I turn my computer of.
April 6th, 2004 at 6:07 am
read the auscert pages and you will be able to add some useful info.
IE/OE hides where you are going. It makes it look like you have gone to the official bank website. You cannot tell the difference. If you believe you are at the official web site, you might just let the install run.