Hackers have created a bogus Internet Explorer 7 download site that attempts to load Trojan code onto the PCs of visiting surfers.

Traffic to the malicious website is being driven by a spoofed email message, claiming to be from support@microsoft.com, offering a link to download Release Candidate 1 (RC1) of Microsoft Internet Explorer 7.

Hackers commonly trick users into visiting malicious sites or executing malware that claims to offer the latest security fixes from Microsoft. The latest attack, reported by net security firm Surfcontrol, represents an adaptation of the technique which takes advantage of the release of IE7 RC1 by Microsoft last week.

In almost related news, a Firefox fan has registered the domain IE7.com, on which he's plastered the logo for the alternative browser software. This site, unlike the spoof IE7 download site, is safe to visit. ®

Related stories

• Firefox plug-in Trojan harvests logins (4 December 2008)
• Malware authors subvert Windows Update (11 May 2007)
• Grum worm poses as IE7 beta (30 March 2007)
• Attackers end-run around IE security (8 November 2006)
• IE7 spoofing bug pops up (26 October 2006)
• MS and researchers split hairs over first IE7 flaw (20 October 2006)
• Information disclosure bug blights IE7 release (19 October 2006)
• IE7 unleashed (19 October 2006)
• Web viruses drop off despite IE exploit flap (18 October 2006)
• IE7 to debut in October (10 October 2006)
• Another day, another zero-day MS exploit (28 September 2006)
• ActiveX security faces storm before calm (2 August 2006)
• MS releases third beta for IE7 (30 June 2006)
• Attack code follows patch update (15 June 2006)
• Update glitch spins out IE7 beta testers (19 December 2005)
• Microsoft may look again at virus notification (17 November 2005)
• Trojan leaps from bogus Windows Update site (8 April 2005)