4 ms·
Reporting says this is for Java in the browser, on Windows, and the target must visit a malicious URL. "[Emails] contained links to malicious domains hosting t
by jph 11y ago
Reporting says this is for Java in the browser, on Windows, and the target must visit a malicious URL.
"[Emails] contained links to malicious domains hosting the Java exploit (JAVA_DLOADR.EFD). The exploit is designed to deliver a Trojan dropper (TROJ_DROPPR.CXC) that drops a payload detected as SPY_FAKEMS.C to the “login user” folder."
"The security firm noted that the vulnerability affects the latest version of Java, 1.8.0.45, but older versions such as 1.6 and 1.7 are not impacted."
"Disabling Java in your preferred browser is for now is a better option. Use a secondary browser with Java enabled to view sites you absolutely must visit and which require it."
"The attack leverages a three-year-old vulnerability in Microsoft Windows Common Controls CVE-2012-015."
https://www.securityweek.com/java-zero-day-used-attacks-nato-member-us-defense-organization https://www.securityweek.com/java-zero-day-used-attacks-nato...
- chinathrow 11y ago"Use a secondary browser within a throwaway VM with Java enabled to view sites. Also, do complain loudly to the org running that website." Fixed that for them.
- kawsper 11y agoThe danish government used a Java-applet to confirm your identity up until October 2014, where it was replaced with a Javascript version. Even though it is now replaced, the install-base is still huge because people don't delete the plugins :(
- mwill 11y ago>complain loudly to the org running that website I lodge my sales tax via a java applet, recently I straight up could not get the applet to run on any of my machines after they went down for an update. I called them up, and their answer was basically: "We can send you a paper form to submit but it will take x days to do that, you will be charged late fees and interest for not lodging on time"
- Aldo_MX 11y agoOne complain will accomplish nothing, hundreds (or thousands) of complains will do.