IE zero-day exploit linked to Java 7 attackers
Researchers believe a new zero-day vulnerability, affecting Internet Explorer (IE) 9 and earlier versions, was exploited by the Nitro cyber gang.
Microsoft has already released a security advisory to alert users of the bug, and said it would issue a temporary patch, which will be available within the next few days for download.
The Nitro cyber criminals, who have targeted companies in the chemical industry to steal intellectual property, were also linked to the threat that caused Oracle to release an emergency patch for Java 7 vulnerabilities in late August. Eric Romang, a Metasploit contributor and researcher, announced the news of the exploit on Sunday in his personal blog.
