Microsoft will rush out an emergency fix for its Internet Explorer (IE) software after the discovery of a flaw which allows hackers to take over PCs. The company says it will release a patch for the web browser today, rather than waiting for its regular security update next month.
The flaw was discovered last week and attacks are "spreading like wildfire", according to software security firm Trend Micro.
The company's senior security adviser Rik Ferguson told Sky News Online: "It's a flaw that affects every version of Explorer on all versions of Windows. "The main problem is that there isn't a patch available, so it is very widespread."
Mr Ferguson explained that many cyber criminals operate by using malware - software that is installed on people's computers without them knowing. The software can then run in the background and connect to servers elsewhere, giving it the potential to detect and then pass on confidential information.
He explained that many pieces of malware are 'injected' onto websites across the world, often by cybercriminals who install them by using sign-up forms or other methods of interacting with a website.
...
Trend Micro believes as many as 10,000 sites have already been compromised, though Mr Ferguson said it is impossible to know how many might have been hit.
His advice is to switch to another browser until the patch is released, as the malicious code only activates when it detects Explorer.
