Wednesday, July 14, 2004

More reasons not to use Internet Explorer

I really value the free Scambusters e-mail newsletter.

Here's part of their latest issue, which goes into detail about the serious security flaws in Microsoft Internet Explorer and their recommendation of Firefox as an alternate browser:

Internet ScamBusters (tm)
http://scambusters.org/
By Audri and Jim Lanford
C o p y r i g h t (c) Audri and Jim Lanford.
Issue #84 July 14, 2004
+++++++++++++++++++++++++++++++++++++++++++++++

Security Alert -- Microsoft Internet Explorer:
Should You Continue to Use It?

As many subscribers already know, Microsoft Internet
Explorer has significant 'holes' or vulnerabilities that
scammers and virus creators can easily take advantage of.
This is certainly not new.

In fact, judging from the number of viruses and Trojans sent
to us by subscribers each week, we know that many
subscribers are currently infected by one or more of these
viruses and Trojans.

What may be new is that the security problems for users of
Windows Microsoft Internet Explorer are becoming even more
serious and severe.

In the past couple of weeks, a new Trojan was detected that
is particularly malicious. It installs itself when you visit
a website -- without your knowledge -- and without your
having to do anything. In other words, you don't need to
click or accept anything -- this Trojan installs itself
anyway.

It is delivered through a pop-up ad that loads a file called
"img1big.gif" onto your computer.

This Trojan is a 'password sniffer.' That means that it
looks for certain kinds of information, such as user names
and passwords, and relays them back to the scammers.

Once it's installed, this Trojan pays attention when you
visit a secure webpage, and it looks for specific banking
sites, including Citibank, Deutsche Bank and Barclays Bank.

If you visit one of these sites and type in your user name,
password, etc. to log in, despite the secure connection, it
still watches your keystrokes and sends them back to the
scammer. (Security experts believe this scammer is in
Russia.)

The scammer then has access to your account information --
and you didn't even know any of this had happened!

What this means: Trojans like this one can give scammers
access to your banking information so they can steal money
from your bank account. Further, these kinds of viruses and
Trojans can be used to gain credit card and other personal
information, again to steal your money -- or your identity.

This is serious stuff.

If you want to read a technical article that contains more
information about this Trojan, visit:

==> http://scambusters.org/a/news2.html

The Department of Homeland Security's U.S. Computer
Emergency Readiness Team has gotten so fed up with these
Microsoft Internet Explorer vulnerabilities, that they
recently recommended that consumers switch to a different
browser.

You can read about the storm they touched off with this
recommendation at:

==> http://scambusters.org/a/news3.html

We happen to agree with this recommendation to switch
browsers. There are just too many security holes in
Microsoft Internet Explorer for Windows. Whereas it
certainly is true that no browser is completely secure, we
no longer feel that using Microsoft Internet Explorer is
worth the security risks.

Our current favorite browser for Windows is Firefox. Visit:

==> http://scambusters.org/a/firefox.htmll

Note: Microsoft did release 7 patches yesterday after this
article was completed. You should definitely run these
patches if you use Windows. However, this doesn't really
change the general points made in this article.

0 Comments:

Post a Comment

<< Home