Cybercrooks add QuickTime, WinZip flaws to arsenal
 

*Source: ZDNet (http://news.zdnet.com/2100-1009_22-6182981.html)*
________
Cybercrooks are trying to breach PCs through previously unexploited security holes in QuickTime and WinZip, security firm Symantec warned on Thursday.

The attacks involve malicious Web sites (http://news.zdnet.com/2100-1009_22-6178930.html?tag=nl) rigged with multiple exploits, Symantec said in a security alert. The sites appear to be that of a trusted financial institution, but instead attempt to silently install keystroke-logging software, according to Symantec. Links to the sites are likely advertised in spam, it said.

More...