ZDNet India : Corporate Web servers infecting visitors' PCs

The researchers believe that online organized crime groups are breaking into Web servers, surreptitiously inserting code that takes advantage of two flaws in Internet Explorer that Microsoft has not yet fixed. Those flaws allow the Web server to install a program that takes control of the user's computer.

The flaws affect every user of Internet Explorer, because Microsoft has not yet released a patch and most antivirus software curretnly cannot detect the flaw. Moreover, the infectious Web sites are not just those of minor companies inhabiting the backwaters of the Web, but major firms, including some banks