SurfControl warns of IE7 phishing campaign

Posted on 18 Oct 2006 at 18:01

SurfControl is warning of a phishing campaign capitalising on the launch of Internet Explorer 7 to dupe people into visiting a site that tries to download Trojan code.

The message appears to originate from support@microsoft.com and urges recipients to visit a site in order to download Release Candidate 1 of IE 7.

The site mimics a legitimate page on Microsoft's own website, and attempts to exploit a flaw in earlier versions of Internet Explorer to automatically download the Trojan Win32.Small.cxz. This installs a backdoor to communicate over the Internet, and reports to a remote server.

SurfControl says it is still analysing figures for the attack, although it does not appear to be widespread in the UK at the moment.

Author: Matt Whipp