Two different hacker groups are exploiting the same still-unpatched vulnerability in Internet Explorer with almost-identical attack code, a security researcher said Tuesday.