In Short: Next-Gen Phishing

E-mail and virus security company MessageLabs Ltd. says it has identified a new form of phishing attack, directed specifically at users of online banking, that runs a script when a phishing E-mail message is opened. The script tries to rewrite the host files on the recipient's machine. On subsequent attempts to access online banking services, victims unknowingly will be redirected to a fraudulent Web site designed to capture their log-in details.

The new technique has only been detected in Brazil, and only systems that have enabled Windows Script Host are vulnerable.