Microsoft MHTML flaw targeted by hackers
Microsoft has warned that hackers are targeting a zero-day flaw that affects all Windows operating systems.
The flaw, which was first highlighted by Microsoft in an advisory in January, allows an attacker to inject a client-side script into the response to a request made by Internet Explorer. The script could allow a hacker to compromise the user — by performing actions online that appear to have originated from the user; by stealing information from the user; or by otherwise trying to fool them.
The company updated its January security advisory on Friday, saying that it had seen attacks in the wild. "Microsoft is aware of published information and proof-of-concept code that attempts to exploit this vulnerability," said the company. "In addition, at this time, Microsoft is aware of public proof-of-concept code being used in limited, targeted attacks."
