redmond
Mirosoft was notified of the IE flaw by McAfee

Microsoft admits IE flaw to blame for Google hack

McAfee notifies Redmond of vulnerability

Dan Worth

In a move bound to cause red faces at Redmond, Microsoft has been forced to admit that a flaw in its Internet Explorer (IE) browser was the route by which Chinese hackers sought to infiltrate Google's corporate systems.

"Based on our investigations, we have determined that Internet Explorer was one of the vectors used in targeted and sophisticated attacks against Google and possibly other corporate networks," wrote Mike Reavey, director of the Microsoft Securtity Response Center, in a blog posting.

Microsoft's announcement came after McAfee's chief technology officer, George Kurtz, wrote in a blog posting that the firm had discovered a new vulnerability in IE that had been exploited by the hackers.

"In our investigation we discovered that one of the malware samples involved in this broad attack exploits a new, not publicly known vulnerability in Microsoft Internet Explorer," he said.

Kurtz added that the targeted attack used tried and tested methods to get users to click on a link that then compromised their machine.

"These attacks will look like they come from a trusted source, leading the target to fall for the trap and clicking a link or file. That’s when the exploitation takes place, using the vulnerability in Microsoft’s browser," he added.

As a result of this, Microsoft issued guidelines to help customers reduce the risk of further attacks and called on firms to remain vigilant against the continued threats that exist.

"Attacks targeting specific corporate networks are becoming more prevalent in the threat landscape and organisations should follow defence-in-depth best practices, and deploy multiple layers of protection to improve their security posture," added Reavey.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Do you agree?

Further reading

phishing

Hackers go after Green Dam lawsuit lawyers

Law firm connected to suit gets hit by phishing attack

Chinese flag

Adobe hit by Chinese Google attack

Firm admits attack on its network "appears to be related" to hack of Google's systems

Clinton demands Google attack explanation from China

Chorus of protest grows across the world

More details emerge on Google hack

Attack could be linked to similar incident last year involving around 100 Silicon Valley firms, says iDefense

Related white papers

Related jobs

Most read stories

Most watched

Analysis and Reports

Storage-as-a-Service: Best efforts or best practice?
IDG research: IT professionals understand the fundamentals of managing and protecting data, but do not apply best practices

The seven security myths of Microsoft Windows 7
It is essential to separate myth from reality about the built-in security of Microsoft’s latest offering

Poll

VMworld 2010 poll

VMworld 2010 poll

How advanced is your firm's cloud computing strategy?

View poll results

White paper library

Attachmate

Smartstream

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you thousands of white papers, case studies and analyst reports.

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

mark hurd

Mark Hurd appointed Oracle president

Charles Phillips out as former HP chief gets job with...

Cloud computing

CIMTrek offers path to the cloud for Lotus users

Tools help migrate Notes/Domino workflows to cloud-based alternatives

ViewSonic ViewPad 7

ViewSonic ViewPad 7 video

Hands on with 7in tablet that features phone capability and...

TalkTalk

ICO warns TalkTalk over URL tracking service

Watchdog criticises ISP for failing to inform customers of trial

Primary Navigation