<http://schema.org/articleBody>
"Highly targeted, politically motivated attacks that affect all supported versions of Microsoft's Windows operating system are being carried out on Google users, requiring the search giant to issue a bulletin warning those who use its services.\r\n\r\nAttacks on Google users utilise an unpatched MHTML\u00A0vulnerability\u00A0that, although disclosed in January, allows attackers to steal sensitive information by exploiting the way Internet Explorer users on Windows parses MIME-formatted webpages, also allowing trusted websites to be spoofed and actions to be performed without\u00A0authorisation.\r\n\r\nMicrosoft has issued a temporary fix but it is unknown how long it will be until a full patch is released.\r\n\r\nGoogle, worried that its users were at risk, issued a warning via its Online Security blog, stating that the company believed activists were the target of the attacks. Interestingly, the post noted that users of another popular social site (possibly Facebook, which will not confirm either way) were also being targeted:\r\nWe\u2019ve noticed some highly targeted and apparently politically motivated attacks against our users. We believe activists may have been a specific target. We\u2019ve also seen attacks against users of another popular social site. All these attacks abuse a publicly-disclosed\u00A0MHTML vulnerability for which an exploit was publicly posted in January 2011. Users browsing with the Internet Explorer browser are affected.\r\n\r\nFor now, we recommend concerned users and corporations seriously consider\u00A0deploying Microsoft\u2019s temporary Fixit to block this attack until an official patch is available.\r\nGoogle says that it has deployed &amp;quot;various server-side\u00A0defences&amp;quot;\u00A0to make the the MHTML vulnerability harder to exploit, adding that although the measures are in place, they cannot be guaranteed to be 100% reliable. With that in mind, the company is in contact with Microsoft to work on a solution for the issue.\r\n\r\nIf you are an Internet Explorer user and want to make sure you are not vulnerable to the MHTML exploit, head to Microsoft's patch page and install the update."^^<http://www.w3.org/2001/XMLSchema#string>
<http://thenextweb.com/google/2011/03/12/google-users-targeted-by-politically-motivated-windows-exploits/>