WebViewFolderIcon ActiveX exploit & Bleeding Snort

 

Nice mention of Blackhole DNS:

On the network side it might be worth considering taking control of hostname lookups on your network through a technique like blackhole-dns: http://www.bleedingsnort.com/blackhole-dns/
The exploit URLs mentioned in the explabs blog have so many IP addresses behind them that blocking by IP or netblock becomes an uphill battle.

 

 

Please let us know ASAP if you know of any domains associated with this latest exploit. Thanks!