SSS: Security-Sucks

In recent days, the vulnerability of flash(CVE-2010-1297) has been used for drive-by download. Therefore, many websites are injected by malicious links such as  (hxxp://2677.in/yahoo.js), and those comprised webistes are intruded by automatic mass injection tools.   

TOMTOM WebSite is injected by Malicious link

In most cases, hackers are faster than vendors, so it gives them a great opportunity to build a strong BotNet and be able to control more victims.    

The following flow chart shows the attacking path of Zero-Day.     

Attacking path of Zero-Day

Threat Mitigation :   

You can temporarily disable or block of the flash.   

Here are three useful blocks.   

FlashBlock:  (firefox) 

http://flashblock.mozdev.org/   

ToggleFlash:(IE)   

http://flash.melameth.com/

CubeMe:(Chrome)

https://chrome.google.com/extensions/detail/ilejdkfldemlafkeebadjppfhdiimbfd?hl=en