Devoted to hardware, software, IT issues, and information technology management

Dozens of Russian porn sites are using the unpatched Microsoft VML exploit to install spyware with an exploit kit called Web Attacker. Sunbelt Software says the attack code has popped up on about a half-dozen Russian porn sites. In addition, since security researchers estimate that Web Attacker is used by nearly 1,000 Web sites, this latest exploit should soon become more widespread. The worst thing about this whole scenario is Microsoft's slow response to this whole drama. They says a patch may be released before the next Patch Tuesday (10 Oct). Web Attacker is a software development kit sold for as little as US$20 to criminals looking for an easy way to develop malware to be installed on unpatched PCs.

Russian Porn sites using Web Attacker kit for VML exploit source