MS warns of new IE exploit to spoof URLs

no fix so far

[tedster]

In a knowledge base article released today, Microsoft warns about a recently discovered exploit that allows a malicious user to "create a link to a deceptive (spoofed) Web site that displays the address, or URL, to a legitimate Web site in the Status bar, Address bar, and Title bar."

[support.microsoft.com...]

For now, they have no fix and only offer some impractical precautions (who wants to surf by double checking every link before you go to the site?)

Part of their recommendations: "Read E-mail Messages in Plain Text." Somehow I can't see them broadcasting that piece of advice very loudly.

[bakedjake]

Read E-mail Messages in Plain Text.

If I ran the world, it would say "Write E-Mail Messages in Plain Text." We can dream, can't we?

Back On-topic: What's even more interesting is that page they link to on verifying that you're not surfing a spoofed website. If you notice on the left, they have a free support line for virus related difficulties.

That's the first I've heard of that. I wonder how much response they're getting.

[DrDoc]

[webmasterworld.com...]

;)