UGN Security
Internet scammers appear to be using three flaws in Microsoft products to place malicious code on popular web sites. Hackers struck Microsoft's Internet Information Server web site and planted code that plants keystroke recording software.

Hackers could be stealing people's financial data through this infection known as "Scob" and it may not be long before others use this exploit to launch big attacks on the Internet and use it for spamming purposes.

Microsoft says it issued patches in April which correct two of the flaws but has yet to issue a patch to correct the 3rd flaw. Users are advised Internet Explorer on its highest security setting, turn off javascript and remove surf.dat and Kk32.dll.

Source
This is actualy a follow up to

http://www.undergroundnews.com/ubb/ultimatebb.php?ubb=get_topic;f=27;t=000824
© UGN Security Forum