Info on a new "0-day" IE Drag-n-Drop vulnerability can be found here.  All things considered, it looks to be a might bit "complex" to come off well, but it may very well be usable.  However, I would say that it'll probably be sitting near the bottom of the list of most popular attacks as long as we still have machines out there vulnerable to WMF and other, easier to do, nasties.