Rhino
05-25-2004, 04:33 AM
It seems that the phisher folk have found some new bait. The newest angle(s) involves sending out fake "order confirmation" messages bearing links that lead to web pages containing exploits for some older IE vulnerabilities. The idea is that no one will be able to resist simply looking at where the link points, and that the phisher will then snag a few unpatched folk in the process. Make sure your patches are up to date and don't respond to messages requesting order confirmation for orders you never placed.