[Am-info] Flowgo Pop-up Ad Leads to Surreptitious Downloads

[Fred A. Miller]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Flowgo Pop-up Ad Leads to Surreptitious Downloads

People who clicked on a certain pop-up ad on the Flowgo site were taken
to another site which appeared to be a digital slot machine and which
actually exploited a flaw in old versions of Internet Explorer's Java
engine to download files onto their computers.  Researchers are not
yet entirely sure what the files do; some monitor surfing habits and
others let more files be sent to the computer.  An install program
also turns off firewalls.

http://www.vnunet.com/News/1131727

- --=20
Fred A. Miller
Systems Administrator
Cornell Univ. Press Services
fm@cupserv.org, www.cupserv.org
- --- SuSE Linux v8.0 Pro---
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjzrvqIACgkQB9vk4ichYXcsDQCfcNwOz39J3Y9g8DnHvZTf+0jX
l7UAoLr1pSN7D0dFp8k3WgPQx7Oc14IX
=3DMD6j
-----END PGP SIGNATURE-----