Main Page Content
Malicious Javascript Shuts Down Hotmail
Microsoft was force yesterday to take down its Hotmail service for four hours due to a security hole
enabling a malicious spammer to intercept Hotmail authentication cookies and take over users' accounts.The hole uses HTML containing Javascript, which when a victim views an attached file the script intercepts the cookies and forwards them to a hostile site.
Hotmail has fixed the hole by redirecting victims who activate the attachment before the JavaScript has a chance to intercept the cookies.
Details on the hole can be found at Peacefire.
