Nasty Spoofing Attack Resurrects Internet Explorer Vulnerability in Windows 10 and 11

Slashdot reader joshuark shared this report from BetaNews:

Check Point Research has identified a critical zero-day spoofing attack exploiting Microsoft Internet Explorer on modern Windows 10/11 systems, despite the browser's retirement.

Identified as CVE-2024-38112, this vulnerability allows attackers to execute remote code by tricking users into opening malicious Internet Shortcut (.url) files. This attack method has been active for over a year and could potentially impact millions... Attackers use a sophisticated trick to mask the malicious.hta extension, making use of the outdated security of Internet Explorer to compromise systems running updated Windows operating systems.


From Check Point Research:

Even though IE has been proclaimed 'retired and out-of-support,' technically speaking, IE is still part of the Windows OS and is 'not inherently unsafe, as IE is still serviced for security vulnerabilities, and there should be no known exploitable security vulnerabilities,' according to our communications with Microsoft.

Read more of this story at Slashdot.