Tag-team attack exploits IE flaw