BleepingComputer.com: Cybercrooks Exploiting Quicktime, Winzip Flaws

Cybercrooks are trying to breach PCs through previously unexploited security holes in QuickTime and WinZip...The attacks involve malicious Web sites rigged with multiple exploits...The sites appear to be that of a trusted financial institution, but instead attempt to silently install keystroke-logging software...Links to the sites are likely advertised in spam...