Poison Ivy Trojan Delivered Via Internet Explorer 7-9

Internet Explorer 10 is not affected.

Thanks to some clever engineering, a new attack has reportedly affected computers running IE7, IE8 and IE8 running on Windows XP, Vista and 7 machines.

According to the recent report, by utilizing Adobe’s Flash Player to conduct a “heap spray” and bypass Windows ASLR (Address Space Layout Randomization) protection, attackers have delivered “Poison Ivy” Trojan to unsuspecting victims.

Thankfully, the software giant is aware of the issue and suggests installing its EMET toolkit for a temporary fix.

We’re aware of targeted attacks potentially affecting some versions of Internet Explorer…. We have confirmed that Internet Explorer 10 is not affected by this issue. We recommend customers deploy Microsoft’s Enhanced Mitigation Experience Toolkit (EMET) 3.0, which provides effective protections without affecting the Web browsing experience. We will continue to investigate this issue and take further actions as appropriate.

Unfortunately, Microsoft did not say anything about the patch or its release date.

[Via ]cNET]