A number of tech sites are describing a new multi-stage web browser attack that has started to appear. In the attack malicious Flash-based ads, some in legitimate sites such as MSNBC.com and Digg.com are repeatedly placing a URL of a site selling fake security software in the victims’ clipboard. People are therefore sent to that site if they perform the common action of copying a URL and pasting it into their web browser’s address bar and hitting enter without noticing that the URL pasted is not the one they copied. This attack is cross-platform against Windows, Linux and Mac OS and remains in place until the user closes their browser.
Adobe has stated they are aware of the attack and investigating potential solutions.