Amnesty International Site Serving Java Exploit

[Jack]

Amnesty International‘s homepage in the United Kingdom is currently serving malware that exploits a recently-patched vulnerability in Java. Security experts say the attack appears to be part of a nefarious scheme to target human rights workers.

The site’s home page has been booby trapped with code that pulls a malicious script from an apparently hacked automobile site in Brazil. The car site serves a malicious Java applet that uses a public exploit to attack a dangerous Java flaw that I’ve warned about several times this past month. The applet in turn retrieves an executable file detected by Sophos antivirus as Trojan Spy-XR, a malware variant first spotted in June 2011.

A woman who answered the phone this morning at Amnesty International’s research and policy branch in the U.K. declined to give her name, but said she would pass on the information about the break-in. The site remains compromised.

Read more...

 

[win7holic]

Exploit seasons now?
several months earlier about Ransomware. lately it feels Fake AV and Exploit.

 

[moonshine]

Exploits any threats out there doesn't choose a time for it to be released. They are around all year long. This is nothing new.

 

[Gnosis]

Frankly, I have been all over the internet lately. I don't think I could find a trojan, virus or other malware if I tried. I don't know if it is the calm before the storm, or illegitimate hackers have found another way to make money and get their kicks. I was thinking of starting my own malware removal gig, but now I am not sure I could stay busy enough to generate a steady income.

 

[Prorootect]

@ZOU1,

Quote:
'I don't think I could find a trojan, virus or other malware if I tried. I don't know if it is the calm before the storm, or illegitimate hackers have found another way to make money and get their kicks.'

- I think that for this new situation (as there is almost no malware on the Web) - we can thank: especially the SmartScreen Filter in Internet Explorer (which ended with the sickly spread of the Russian Fake AV, Chinese also), and also Google's efforts last time ..

 

[ranget]

ops

another java exploit

also it's not always about money making