SkipToMainContent

Emerging Threats

New Internet Explorer vulnerability found - update your version now


Written by a NortonLifeLock employee

 

Microsoft has issued a critical security update for their web browser, Internet Explorer. This bug has already been seen in attacks involving the Evangelical Lutheran Church of Hong Kong’s website. Attackers compromised the website by modifying its code to redirect users to another website that hosts the exploit. Once victims were redirected to the fake website, a malicious file known as Korplug, which is a backdoor Trojan, was downloaded to the victims’ computers.

Try Norton 360 FREE 30-Day Trial* - Includes Norton Secure VPN

30 days of FREE* comprehensive antivirus, device security and online privacy with Norton Secure VPN.

Join today. Cancel anytime.

*Terms Apply

The security hole in Internet Explorer could allow an attacker to take over a computer. Once the attacker has gained control, they can potentially install programs, view, change, or delete data and more. All it takes is for a user to visit a specially crafted webpage that contains malicious code while using Internet Explorer. The malware used in this attack has been seen in a range of attacks, mainly in Asia over the past three years.

This vulnerability affects versions of Internet Explorer 7, 8, 9, 10, and 11 that are running on Windows Vista, Windows 7, Windows 8, and Windows RT (tablet).

To stay safe from this vulnerability:

  • Norton customers are protected. Be sure that you have the latest version of your software installed.
  • Use Windows Update or the Microsoft Download Center to protect against this.
  • Be cautious when receiving emails, instant messages or any other kind of communication from unknown senders.
  • Avoid clicking on links and don’t open unexpected attachments sent through email.

Try Norton 360 FREE 30-Day Trial* - Includes Norton Secure VPN

30 days of FREE* comprehensive antivirus, device security and online privacy with Norton Secure VPN.

Join today. Cancel anytime.

*Terms Apply


Editorial note: Our articles provide educational information for you. NortonLifeLock offerings may not cover or protect against every type of crime, fraud, or threat we write about. Our goal is to increase awareness about cyber safety. Please review complete Terms during enrollment or setup. Remember that no one can prevent all identity theft or cybercrime, and that LifeLock does not monitor all transactions at all businesses.

Copyright © 2020 NortonLifeLock Inc. All rights reserved. NortonLifeLock, the NortonLifeLock Logo, the Checkmark Logo, Norton, LifeLock, and the LockMan Logo are trademarks or registered trademarks of NortonLifeLock Inc. or its affiliates in the United States and other countries. Firefox is a trademark of Mozilla Foundation. Android, Google Chrome, Google Play and the Google Play logo are trademarks of Google, LLC. Mac, iPhone, iPad, Apple and the Apple logo are trademarks of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc. Alexa and all related logos are trademarks of Amazon.com, Inc. or its affiliates. Microsoft and the Window logo are trademarks of Microsoft Corporation in the U.S. and other countries. The Android robot is reproduced or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License. Other names may be trademarks of their respective owners.