Credit Union Times and SecureWorks IE Zero Day attack and issued recommendations

Sited source: Experts Recommend Avoiding Internet Explorer

The credit union industry is reacting to the ongoing attack on Microsoft’s widely used Internet Explorer software by recommending people avoid using the browser. Security experts reported the flaw in a number of versions of Explorer last week.

SecureWorks and others are recommending that Internet Explorer users – individuals and companies – use the patch for IE vulnerability just released by Microsoft as soon as possible. If unable to do that, Ramsey recommends these steps first.

Disable Adobe Flash plugin. There is no associated vulnerability in Flash, but it is used to create the proper memory environment for successful exploitation and its absence will prevent infection in this specific case.

Enable Enhanced Protected Mode (EPM). Introduced in Internet Explorer 10, EPM provides features that can prevent this exploit from working.

Deploy the Enhanced Mitigation Experience Toolkit (EMET). The observed exploit contains techniques intended to bypass common mitigation strategies such as DEP and ASLR. EMET implements extended exploit mitigation.