MC 2: MC2 Post 1491 A Splash of a bitter and Critical Java 'Zero-Day Bug' to Guard Against

Saturday, January 12, 2013

MC2 Post 1491 A Splash of a bitter and Critical Java 'Zero-Day Bug' to Guard Against

The Java Browser Plugin is being

“massively exploited in the wild”

(Updated)

Attack code that exploits vulnerability in Java's browser plugin has been added to the Blackhole, Cool, Nuclear Pack, and Redkit exploit kits, according to the Malware Don't Need Coffee blog, prompting its author to say that the bug is being "massively exploited in the wild." Miscreants use these products to turn compromised websites into platforms for silently installing keyloggers and other types of malicious software on the computers of unsuspecting visitors. KrebsOnSecurity reporter Brian Krebs said the curators of both Blackhole and Nuclear Pack have taken to the underweb to boast of the addition to their wares. It's not yet clear how many websites have been outfitted with the exploits.

Link: http://arstechnica.com/security/2013/01/critical-java-zero-day-bug-is-being-massively-exploited-in-the-wild/

TinyURL: http://tinyurl.com/adm6ehy

===================================

Update: Analysis from antivirus provider Kaspersky Lab indicates
the exploits are already deployed on a variety of websites.

===================================

Java plugins unplugged by Mozilla and Apple

( With Varying Levels of *Protection... )

Wingman.

Link: http://www.h-online.com/security/news/item/Java-plugins-unplugged-by-Mozilla-and-Apple-1782628.html

TinyURL: http://tinyurl.com/bwrvulr

===================================

*The H Article has the Best Information on
how to Disable Java plugin for Your Particular Browser.

Wingman.