IE Zero-Day Exploit Disappears On Reboot

[wraggster]

Criminals are taking advantage of unpatched holes in Internet Explorer to launch 'diskless' attacks on PCs visiting malicious sites (http://www.pcpro.co.uk/news/security/385309/ie-zero-day-exploit-disappears-on-reboot). Security company FireEye uncovered the zero-day flaw on at least one breached U.S. site, describing the exploit as a 'classic drive-by download attack'. But FireEye also noted the malware doesn't write to disk and disappears on reboot — provided it hasn't already taken over your PC — making it trickier to detect, though easier to purge. '[This is] a technique not typically used by advanced persistent threat (APT) actors,' the company said. 'This technique will further complicate network defenders' ability to triage compromised systems, using traditional forensics methods.'"
http://it.slashdot.org/story/13/11/11/1615245/ie-zero-day-exploit-disappears-on-reboot