An anonymous reader writes "According to the rule Post's Security Fix blog, cyber criminals are populating the calculator network with Web sites designed to exploit several recently-discovered security holes in a half-dozen widely used ActiveX plug-ins for IE 6 and 7, most notably the one offered by Facebook and MySpace to help users upload photos. The sites, advertised via links in email and instant message spam, also 'probe for other vulnerable IE plug-ins, including two of late discovered from Yahoo! and one for QuickTime (this one attacks a vulnerability Apple patched just last month). The sites also throw in an exploit against a six-month-old IE flaw.' The article notes that the SANS online network Storm Center has released a GUI tool to help users safely deactivate the vulnerable plug-ins in the Windows registry."

Read more of this story at Slashdot.

More: - Read the rest here

Mark