News for hackers. Stuff that matters.

A comment on New Java 0-Day Vulnerability Being Exploited in the Wild. Parent comment

Re:New Java 0-Day Vulnerability Being Exploited in the Wild by chime on Friday March 01, 2013 @10:32AM (#5304723)
User googles for 'digital camera nokia review' and ends up on a site containing a specially crafted 1x1 pixel Java applet. User doesn't even know it's there but due to the 0-day exploit, the applet can now download a remote executable to the user's machine and execute it. User's computer is now part of a botnet and all the user did was perform an innocuous google search.
[ Parent | on HN ]
Re:New Java 0-Day Vulnerability Being Exploited in the Wild by jonknee on Friday March 01, 2013 @10:44AM (#5304818)
Yes or it could be a site they visit regularly that has been hacked. Or a site that hasn't been hacked but that has JS from an ad network on it that has been hacked or let through a vulnerability. These are very scary hacks.

Update: I wrote up my recent experience of a shady advertising buy that appears to have spreading malware (likely via Java) as a goal http://news.ycombinator.com/item?id=5305092

[ Parent | on HN ]