{"id":63953,"date":"2018-04-24T07:38:18","date_gmt":"2018-04-24T07:38:18","guid":{"rendered":"https:\/\/www.biphoo.com\/bipnews\/?p=63953"},"modified":"2018-04-24T07:38:18","modified_gmt":"2018-04-24T07:38:18","slug":"internet-explorer-zero-day-bug-microsoft-needs-fix","status":"publish","type":"post","link":"https:\/\/www.biphoo.com\/bipnews\/technology\/internet-explorer-zero-day-bug-microsoft-needs-fix.html","title":{"rendered":"Internet Explorer has a zero-day bug that Microsoft needs to fix"},"content":{"rendered":"

Internet Explorer has a zero-day bug that Microsoft needs to fix<\/span><\/strong><\/span><\/h2>\n

Internet Explorer is pre-installed on every Windows PC, even though it\u2019s been superseded by Microsoft\u2019s new Edge browser in terms of long-term support. The reason is simple: Many organizations use the archaic browser for legacy applications, and so Microsoft has had to keep it around but isn\u2019t spending a great deal of time on improving it. Unfortunately, according to one security firm, Internet Explorer has a serious flaw that\u2019s leaving it open to malware attacks.<\/span><\/p>\n

ZDNet reports on the zero-day bug, which is coming from Chinese antivirus software company Qihoo 360 Core. The company\u2019s security research team claim that the bug uses a Microsoft Office document that has a vulnerability installed that opens a web page that downloads a piece of malware. According to the researchers, the malware exploits a user account control (UAC) bypass attack, and it also utilizes file steganography, which is the technology of embedding a message, image, or file within another message, image, or file.<\/span><\/p>\n

Microsoft responded to ZDNet\u2019s request for comment with the following rather generic statement:<\/span><\/p>\n

\u201cWindows has a customer commitment to investigate reported security issues, and proactively update impacted devices as soon as possible. We recommend customers use Windows 10 and the Microsoft Edge browser for the best protection. Our standard policy is to provide remediation via our current Update Tuesday schedule.\u201d<\/span><\/p>\n

The following image shows a basic flowchart of how the bug is executed on an affected system. Beyond this, there is not a great deal of information on the flaw and little else to go on in determining just how infected systems are impacted. Until Microsoft fixes the bug, of course, it will remain an issue for Windows users.<\/span><\/p>\n

Apparently, the attack is being conducted globally by an \u201cadvanced persistent threat (APT) group.\u201d That implies a group of hackers with some capabilities that can conduct such a sophisticated attack. Unfortunately, there is not much users can do at this point except follow the usual security advice: Keep your systems and software updated, make sure you\u2019re using sufficient malware protection, and don\u2019t open any files unless you\u2019re absolutely certain that it\u2019s from a trusted source and that it was sent on purpose.<\/span><\/p>\n

Source:-https:\/\/www.digitaltrends.com\/computing\/internet-explorer-zero-day-bug-in-wild\/<\/span><\/p>\n

\n\t\t\t
\n\t\t\t <\/div><\/div>\n\t\t