Internet security conditions still grim on New Year's Eve

Absrtact: 457 million Chinese netizens are eager to relax the Spring festival, but the Internet security situation is still grim on New Year's Eve. Recently, the 360 Security Center issued Orange Security alert said that Microsoft has confirmed that the Windows operating system MHTML protocol in a high-risk 0day vulnerability, may lead to

457 million of Chinese netizens are eager to relax, but Internet security is still grim on New Year's Eve.

Recently, the 360 Security Center issued Orange Security alert said, Microsoft has confirmed that the Windows operating system MHTML protocol in a high-risk 0day vulnerability, may lead to user's computer in the common password, e-mail and other important information leaked, the problem will affect the world's 900 million Internet Explorer users. Microsoft officials are reported to have urgently provided temporary patches.

360 security expert Shi Xiaohong said, many netizens are accustomed to in the private computer to mailbox, Weibo and so on commonly used account "remembers the password", is equivalent to these account "passes" to save in the cookie file, next time accesses can directly login. And the latest MHTML 0day vulnerability will lead to Internet users computer cookie files are hackers, resulting in e-mail leaks, micro-blog accounts by hackers and other consequences.

After 360 Security Center verification, the Microsoft MHTML 0day flaw mainly affects each Windows system's IE browser, the most common attack way is: The hacker through the Chat tool, the Forum and so on forms a malicious website link, the temptation netizen clicks on the login. This link seems to be a well-known web site page, in fact, a bit will run malicious script, so as to steal Internet users computer cookies and other important information, the victim's personal privacy, account, etc. pose a serious threat.

In response to Microsoft's official temporary patches, Shi Xiaohong that the patch is a "locked MHTML protocol" approach to protect against vulnerabilities, but also may lead to some well-known sites of the normal function of compatibility problems. To this end, she reminded netizens, once the installation of Microsoft temporary patches after some of the Web site function failure, you can download Microsoft's official "Undo lock MHTML" Recovery tool, you can easily undo the previous MHTML vulnerability temporary patches.

It is reported that Google and other well-known sites have MHTML loopholes, and Google has also informed the Microsoft Security Department, asked Microsoft to fix the loophole as soon as possible. However, according to Microsoft's newly released February patch, Microsoft is likely to launch a formal patch of MHTML vulnerabilities by March.

In this respect, Shi Xiaohong said that the MHTML loophole is currently only a serious threat. Fortunately, the domestic Internet has not found a large area of hackers to exploit the vulnerability of the attack.

Commercial newspaper reporter Zhang Yiwang