Resurrecting Internet Explorer -- the nasty threat impacting potentially millions of Windows 10 and 11 users

Check Point Research (CPR) has identified a critical zero-day spoofing attack exploiting Microsoft Internet Explorer on modern Windows 10/11 systems, despite the browser's retirement. Identified as CVE-2024-38112, this vulnerability allows attackers to execute remote code by tricking users into opening malicious Internet Shortcut (.url) files. This attack method has been active for over a year and could potentially impact millions. The exploit involves tricking users into clicking.url files that unexpectedly force Internet Explorer to navigate to a harmful URL. Attackers use a sophisticated trick to mask the malicious.hta extension, making use of the outdated security of Internet Explorer… [Continue Reading]