South Korea victim of Internet Explorer zero-day vulnerability
Security firm Symantec has reported that South Korea has been affected by targeted attacks that exploited an Internet Explorer zero-day vulnerability.
According to a post on the company's blog, attackers were able to use an exploit -- dubbed Microsoft Internet Explorer Scripting Engine Remote Memory Corruption Vulnerability CVE-2016-0189 -- to execute an arbitrary code.
"They may have distributed the exploit through a link included in a spear-phishing email or a compromised, legitimate website that redirected users to the exploit," the blog explains. Symantec said the exploit's landing page contained JavaScript code that profiled the computer belonging to the user visiting the site, with the code then checking if the computer was a virtual machine, and determining which version of Internet Explorer, Flash, and Windows was running on the computer.
