Microsoft details web traffic hijack flaw in Windows

Microsoft details web traffic hijack flaw in Windows

Microsoft is warning of an attack that could be used to divert an organisation's Web traffic through a malicious proxy server.

Applications such as Internet Explorer use the Web Proxy Automatic Discovery (WPAD) protocol to find a file that enables a browser to configure its proxy settings. However, it's possible to plant a configuration file that would route traffic through a malicious proxy, the company said.