Java Zero-Days And The Blackhole Exploit Kit

snoopy · Sep 6, 2012

Java Zero-Days and the Blackhole Exploit Kit
9:36 am (UTC-7) | by Jon Oliver (Software Architecture Director)

Last week’s Java zero-day vulnerability has been exploited by many exploit kits in the wild, including the familiar Blackhole Exploit Kit.

In this blog entry, we thought we would describe some of the outbreaks related to this attack we’ve seen in the past week or so. Our automated processes that are a part of the Trend Micro™ Smart Protection Network™ started detecting and blocking these attacks as soon as they were spotted in the wild. A number of methods have been used to direct Internet users to the landing pages hosting these attacks, including:

Spam runs
Compromised sites
Redirection from pornographic websites
Malvertising

The usage of multiple ways to direct users to malicious sites definitely increase the chances of users stumbling into them, thus increasing the risk. In terms of the spam runs, we also saw several types of lures used:

Fake LinkedIn messages
Fake antivirus notifications
Faxes purporting to come from eFax
Fake Western Union money transfers
Click to expand...

More details here: http://blog.trendmicro.com/

Log in or Sign up

Java Zero-Days And The Blackhole Exploit Kit

snoopy Registered Members

Share This Page

Log in or Sign up

Java Zero-Days And The Blackhole Exploit Kit

snoopy Registered Members

Share This Page

Useful Searches