Attackers Go Phishing For Payroll Workers With Java Cve-2012-1723 Exploit

snoopy · Aug 6, 2012

Monday, August 6, 2012
Attackers Go Phishing for Payroll Workers With Java CVE-2012-1723 Exploit

The Java CVE-2012-1723 vulnerability is suddenly the golden child of bugs. The flaw, which Oracle patched in June, has been the target of several pieces of malware and Web-based attacks of late, and now researchers say there is a phishing scam targeting payroll and HR employees that involves and exploit for the Java bug, as well.

Phishing schemes and targeted attacks against the people inside organizations who run payroll and other finance functions have been an ongoing problem for several years, but they may not be as well-known as some of the more general phishing scams. These attacks are designed to get the attacker's malware onto the machine of someone who handles large amounts of money and financial transactions on a regular basis. There have been numerous examples of small businesses and local government agencies that have been targeted and lost large amounts of money through these attacks.

The latest version of this kind of attack is using a scare tactic, telling recipients of the phishing email that the certificate they use to access their ADP payroll system is about to expire and needs to be renewed. If the user clicks on the embedded link, she'll end up on a site that's serving up a variety of exploits, including one for the Java CVE-2012-1723 flaw.

Click to expand...

More on this topic : https://threatpost.com/en_us/blogs/attackers-go-phishing-payroll-workers-java-cve-2012-1723-exploit-080612

Log in or Sign up

Attackers Go Phishing For Payroll Workers With Java Cve-2012-1723 Exploit

snoopy Registered Members

Share This Page

Log in or Sign up

Attackers Go Phishing For Payroll Workers With Java Cve-2012-1723 Exploit

snoopy Registered Members

Share This Page

Useful Searches