SAN FRANCISCO (AFP) - Microsoft will release an emergency patch on Wednesday to fix a perilous software flaw allowing hackers to hijack Internet Explorer browsers and take over computers.

The US software giant said on Tuesday that in response to "the threat to customers" it immediately mobilized security engineering teams worldwide to deliver a software cure "in the unprecedented time of eight days."

According to researchers at software security firm Trend Micro, attacks based on the vulnerability in the world's most popular Web browser are spreading "like wildfire" with millions of computers already compromised.

Microsoft typically releases patches for its software on the second Tuesday of each month and rushing this fix to computer users out-of-cycle is testimony to the severe danger of the threat, according to Trend Micro.

"When the patch is released people should run, not walk, to get it installed," said Trend Micro advanced threat researcher Paul Ferguson.

"This vulnerability is being actively exploited by cyber-criminals and getting worse every day."

Trend Micro has identified about 10,000 websites that have been infected with malicious software that can be surreptitiously slipped into visitors' unprotected IE browsers to take advantage of the flaw.

A major Internet portal in Taiwan is among the legitimate websites unknowingly tainted with malicious software aimed at IE's weak spot, according to Ferguson.

Hackers can take control of infected computers, steal data, redirect browsers to dubious websites, and use machines for devious activities such as attacks on other networks, according to security specialists.

"What makes this so insidious is it takes advantage of a big gaping hole of IE, which has the largest install base of any browser on the market," Ferguson said.

IE is used on nearly three-quarters of the world's computers, according to industry statistics from November.

"At this time, we are aware only of attacks that attempt to use this vulnerability against Windows Internet Explorer 7," said Microsoft security response communications head Christopher Budd.

"Microsoft encourages customers to test and deploy this update as soon as possible. Microsoft's teams worked around the clock."

Ferguson said the flaw is being taken advantage of in "multiple versions" of IE not just the most current.

Trend Micro urges IE users to heed precautionary advice from Microsoft, or avoid using the browsers, until the patches are applied.

"There is a working flaw circulating in the criminal underground," Ferguson said. "It opens the window of opportunity that much wider to take advantage and there has not been real protection against it."

The "exploit" is similar to one used recently to steal user names, passwords and other information from people playing online games in China, according to Trend Micro.

A Chinese computer security firm that had discovered attacks taking advantage of the IE flaw released details last week after evidently thinking Microsoft had fixed the problem with routinely released software patches.

"It spread like wildfire from there," Ferguson said. "I guess they were trying to be responsible and share what they knew about what was going on, but they were mistaken about it being patched."

Better Business Bureau is warning consumers to keep their guard up and their wits about them in order to fend off a new string of phishing e-mails making the rounds this holiday season.

Hackers and scammers are pretending to be customer service personnel from some of the biggest names in business—including FedEx, UPS, and Wal-Mart. Hackers are impersonating well-known companies that do a lot of business this time of year—specifically retailers and shipping companies—in order to quickly earn recipients’ trust and gain access to computer drives, files and accounts to steal personal information such as Social Insurance, bank or credit card numbers.

“While most of the country is spreading peace and love this holiday season, cyber criminals are spreading computer viruses and stealing identities and information,” said Chris Lawrence, CEO of BBB Serving Central and Northern Alberta. “Hackers using e-mail phishing messages are conning consumers by posing as trusted businesses such as Wal-Mart, FedEx and UPS this time of year to take advantage of the seasonal increase in online shopping and shipping of merchandise all across the country.”

Following are three phishing e-mails BBB has spotted, and that con artists are relying on this holiday season to take advantage of consumers:

Shipping

Hackers have created phishing e-mails which pretend to be from shipping companies claiming that there is a problem with delivery of merchandise. Commonly, the e-mail will include a hyperlink for recipients to click that will take them to another Web site that might install malware or solicit personal information. A message currently making the rounds has a subject line that looks like, “Subject: Tracking Number 13040065504.” The body of the message claims that a package couldn’t be delivered and advises the recipient, “To take your package back you should print the copy of invoice that is in the added file.” Of course, the attachment is actually a virus that will infect the computer if opened.

BBB ADVICE: Instead of clicking on the link in the e-mail, go directly to the shipper’s Web site or contact the company via phone in order to confirm whether there is a shipping problem with your package. Do not open attachments to unsolicited e-mails.

Surveys Offering Holiday Spending Cash

In an effort to take advantage of cash-strapped holiday shoppers, phishing e-mails are circulating pretending to be from retailers such as Wal-Mart. One e-mail has a subject line that reads, “Online Survey from Wal-Mart Stores!!!” And the body of the message states, “This survey has been sent only to a few people from our random generator!”, and “You’ve been selected to take part in our quick and easy 9 questions survey. In return we will credit $90.00 to your account - Just for your time!” Ultimately, the e-mail includes a link to a Web site where the recipient is supposed to take the survey, but in fact leads to a phishing site.

BBB ADVICE: Do not respond to unsolicited e-mails that promise money for answering surveys. Spam e-mails that offer big rewards with little effort will almost invariably cost you in the end.

E-Cards

E-cards are an extremely popular—and inexpensive—way to deliver season’s greetings to loved ones. Typically, with legitimate e-cards, the recipient receives an e-mail with a hyperlink that will take the user to the e-card which is housed on a Web site. Unfortunately, by design, e-cards are an extremely easy way for hackers to disguise their phishing e-mails and direct users to their Web sites which install viruses and malware.

Consumers should think twice before clicking on a link in an e-card e-mail as the hackers will often use logos from recognized brands and companies in order to appear legitimate.

BBB ADVICE: Phishing e-mails posing as e-cards can be difficult to spot. Spelling and grammatical mistakes are a huge red flag. Also, don’t follow the link in an e-card if you don’t recognize the name of the sender.

For more information on staying safe when shopping online this holiday season, and for a host of other seasonal tips, go to edmonton.bbb.org.

During the month of November 2008 the following businesses (listed alphabetically by their city/town where they are located) renewed their Accreditation with BBB Serving Central and Northern Alberta and their commitment to trust and reliability in business.

BBB wishes to thank these businesses and urges all consumers and businesses to support these and other BBB Accredited Businesses, listed by their type of business (TOB) in our Accredited Business Roster or searchable by their business name in Company Reports. Using our e-Quote system, consumers and purchasers can also request prices and information from BBB Accredited Businesses.

Bonnyville, Cold Lake, St Paul, Fort McMurray, St Paul

J D Collision 2007 Ltd, Contain Enviro Services Ltd, Demers Contracting Services Ltd, Life Force Herbal Healing Centre, Smyl Motors Ltd

Calgary

Action Auger Canada Inc, FBC

Camrose, Lacombe, Leduc,

Lamb Ford Sales Ltd, Transmission Express Ltd, Sauder Electric Ltd,DK Ford Sales Ltd, Jacob's Construction Ltd, Laser Tech Audio Video Unlimited

Edmonton

9th Street Bistro / Martini's Bar & Grill , A & C Transmission , A B Tile & Stone Ltd , A L M InternationaL Hotel and Restaurant Promotions Inc , A&A Computers Inc , Abalone Construction Services Inc , Accord Auto , Action Express & Hotshot , Airfresh Environmental , Al-brite Manufacturing Jewellers Ltd , Alberta Property Inspections Ltd , Alberta Transmission Service , All Type Electric Ltd , Allways Moving & Hauling , Always Plumbing , AM Steam Carpet & Upholstery Cleaning , Arctic Appliance Parts & Service , Argyll Travel & Cruises , Avison Young Commercial Real Estate (Alberta) , Award Contractors Ltd , Baldwin Piano Centre , Best Woodcraft Ltd , Big Rig Driver Education , Bow Wow Dog Grooming , Briskal Systems Ltd , Bubbles Car Wash & Detail Centres (Oliver Square) , Canadian Western Bank , Capital Colour Press Ltd , Carefree Coach & RV , Champagne Limousines , China Herbal & Acupuncture Centre Ltd , Classic Kitchens & Cabinets Ltd , Consolidated Mortgages & Loans Ltd , Dominion Pro-Vac Inc , Dust Queen Inc , Dymond Zye Exteriors & Renovations , Eagle Ridge at Cougar Rock , Eastman Hardwood Floorings Ltd , Empire Drywall Ltd , Fast Lane Transport Ltd & Hot Shot , First Choice Siding , Freeze Maxwell , Full House Renovations Inc , G & E Auto Brake & Tune Up , Garage Works Ltd , Gem Cabinets Ltd , General Signs & Service Ltd , General Veterinary Hospital Ltd , Getz Rid Pest Control , Gold Crest Kitchens Inc , Gourmet Secrets Inc , Groupsales.Com , Health Care Direct Inc. , Hi Signs The Fath Group , High Speed Printing , Hondatoy Automotive Ltd , Hydrogeological Consultants Ltd , Igloo Building Supplies Group , Imperial Parking Canada Corporation , Independent Bath Products Ltd , Indigo Construction Services Ltd. , Innovative Concrete Solutions Ltd , J V Upholstery Ltd , Jetco Mechanical , Jonoke Software Development Inc , JP's Sales, Service & Repair Ltd , Koko Beach Home Resort Center , Kyle Loranger Design Inc , Lee Ridge Electrical Services Ltd , Lotus Interiors Ltd , Loving Pets Memorial Services Ltd , Lube-X , Lund's Auto & Truck Parts Ltd , Mac James Motors , Master Reglazing , National Audio Video Ltd , Northern Alberta Renovations Ltd , Northgate Pontiac Buick GMC LP , OASYS Canada Inc , Optimum Credit Recovery Inc , Oxygen Products Ltd , Paramount Flooring , Pat's Driveline Specialty & Machine Ltd , Pillar To Post The Home of Home Inspection , Plutonic Marble & Granite Ltd , Professional Realty Group Inc , Quadrant Construction Ltd , Rain-Alta Holdings Ltd , Rapid Revolutions , Renfrew Insurance Ltd , Schwabe's Automotive Centre Inc , Serenity Funeral Service , Sierra Contract Flooring Ltd , Sisbro Landscaping , Splash Tub & Tile , Sun Ray Manufacturing Inc , T-Y Employment Agency of Alberta Ltd , Telco Power & Battery , The Cat Lady , The Kitchen Studio and Wallbeds-Etc. Ltd. , The Party Line , Time Line Construction Ltd , Titan Flooring & Interior Design Ltd , Toptech Automotive Ltd , Transcend Coffee , Travel Guardian , Tree Time Inc , Unipac Packaging Products Ltd , Vacations Plus - The Travel Superstore Ltd , West Edmonton Coin & Stamp Corporation , Western Power Train Repair Ltd , William Huff Advertising Ltd , Woodhaven Custom Millwork & Renovations

Edson, Hinton, Valleyview, Westlock, Whitecourt

Wildens Service Ltd, Mid West Glass Ltd, Hi Line Distributors, Westlock Movers, Adams Enterprises (1993) Ltd

Fort Saskatchewan, Morinville

Denham's Crystal Chrysler, Roadreddy Auto Service Ltd, Action Moving

Grande Prairie

BDO Dunwoody LLP, G P Fire Extinguisher & Safety Ltd, Mobility Plus Health & Homecare Centre, Northern Vision Centre, Orbit Hydraulics (1988) Ltd, Perfection Automotive Services, The Muffler Man, Valard Construction Ltd

Red Deer

Avena Originals Marketing Systems Ltd, Bruin's Plumbing & Heating Ltd, C N C Office Solutions, Carpet Colour Centre, D B Engineered Hydraulics (1994) Ltd, National Transmission Ltd, Red Deer Registries, True-Line Contracting Ltd , Upstairs Downstairs Manufacturing

Rocky Mountain House, Stettler, Sylvan Lake

Bauer's Countrywide Home Furnishings Ltd, Aspen Ford Sales Ltd, Falcon Homes Ltd

Sherwood Park

Botanical Link Inc, Excellence Homes Limited, Got A Ticket? 'Fight It', I C C Integrated Construction Concepts Ltd, Matheson Insurance Services Ltd, Nufloors, Park Veterinary Centre

Spruce Grove, Stony Plain

Gratzfeld Eavestroughing & Tinsmithing Ltd, Hayes Denture Clinic, Araday Enterprises, Southbend Developments Inc, Tylertouch Renovation & Design

St. Albert

DG Kaban Sewer And Drain Ltd, Ashcore Electric, Cosy Insulation Ltd, Davery Consulting & Custom Homes Ltd, G L C Moving, Hardy & Seymour Building Movers Ltd, Innovations Music, Innovative Design & Drafting, Jacon & Dave's Construction, Kodiak Carpet Care (1973) Ltd, Safekey Locksmith Ltd, Farlie Worldwide Travel Management

Markham, ON

Canadian Baby Photographers Ltd

We proudly welcome new Accredited Businesses that have pledged to abide by BBB^® Principles for Trust in an effort to protect and promote the free enterprise system through self-regulation.

The following is a list of new BBB Accredited Businesses whose applications have been approved by our Board of Directors from November 1 to 30, 2008.

To find out more about these new BBB Accredited Businesses and the goods and services they provide, "click" on their link and view their Online Reliability Report. Each report also provides contact information.

• Artemis Jewellers - Red Deer
• Aurora Home Design - Edmonton
• BREACO Security & Consulting Ltd - Fort Saskatchewan
• Canada Brokerlink - Lac La Biche
• Cornell Industries - Red Deer
• Cross Country Homes - Acheson
• Fancy Furs Dog Grooming & Boarding Kennels - Ferintosh
• Grandin Cermic Tile Co - Edmonton
• GV Services Ltd - Edmonton
• Hun Masonary Ltd - Edmonton
• Jabneel Construction Inc - Lamont
• Jade Cash ATM - Sexsmith
• Just Sweeps - Edmonton
• Kanvi Homes - Edmonton
• McCallum Printing Group Inc - Edmonton
• Outdoor Essentials - Fort McMurray
• Padrino Drywall Inc - Edmonton
• Pirate Light Oilfield Hauling Inc - Red Deer
• Pivotal Events Ltd - Edmonton
• Razor Security - Red Deer
• The Embroidery Company Inc - Edmonton
• Vex Mechanical Corp - Red Deer
• Walia Renovations Ltd - Edmonton

Bookmark this link to see our monthly list of New Accredited Businesses.

 
Click for BBB^® Accredited Businesses in Central and Northern Alberta that are Toy Retailers

A hot topic for many parents and relatives of children is a trust issue - 'which brands and which toys can I trust?' The health and safety of children cannot be left to chance. There is plenty of reliable information available about toy recalls, and BBB is encouraging everyone who will be giving or donating toys take a few minutes and become a smart, safe toy shopper.

How to find out which toys have been recalled?

Health Canada maintains a substantial and searchable list of toys and many other consumer products that have been recalled on their Consumer Product Safety Website (Look under Children's Products for toys). The Canadian Toy Association also offers research information about toy safety through their website.

What to do if you have purchased a recalled toy?

If you purchased the toy from a retailer, try returning the item to them first to potentially save yourself the time it will take to deal directly with the toy manufacturer. Major toy outlets often have their own return policy for recalled toys.

Consumers should certainly be aware that the CPSC warns that at-home lead-level testing kits are inaccurate, so if you're worried about lead poisoning, first talk to your pediatrician about conducting a blood test. As a second step, if you think your child has been hurt by a potentially toxic toy, contact your Alberta Regional Health Authority.

Additional Safe Toy-Buying advice

Be careful when shopping online! Most large brick and mortar stores are often quick to pull products off the shelf, and, as a secondary precaution, flag the bar codes so if the item is scanned at checkout the cashier knows to not let you purchase the item. While online auction sites or bulletin boards may have policies against selling recalled toys, according to researchers from the Center for Injury Research and Policy at Columbus Children's Hospital, recalled toys and other unsafe products are often being sold to unknowing parents.

This consumer tip is provided by BBB Serving Cental and Northern Alberta. Click here for more consumer tips.