Java Zero-Day Vulnerability Rolled Into Exploit Packs

[sl4shd0t]

tsu doh nimh writes "The miscreants who maintain Blackhole and Nuclear Pack — competing crimeware products that are made to be stitched into hacked sites and use browser flaws to foist malware — say they've added a brand new exploit that attacks a previously unknown and currently unpatched security hole in Java. The curator of Blackhole, a miscreant who uses the nickname 'Paunch,' announced yesterday on several Underweb forums that the Java zero-day was a 'New Year's Gift,' to customers who use his exploit kit. The exploit has since been verified to work on all Java 7 versions by AlienVault Labs. The news comes days after it was revealed that Paunch was reserving his best exploits for a more closely-held exploit pack called Cool Exploit Kit, a license for which costs $10,000 per month." http://a.fsdn.com/sd/twitter_icon_large.png (http://twitter.com/home?status=Java+Zero-Day+Vulnerability+Rolled+Into+Exploit+Packs%3A+htt p%3A%2F%2Fbit.ly%2FVNg6eM) http://a.fsdn.com/sd/facebook_icon_large.png (http://www.facebook.com/sharer.php?u=http%3A%2F%2Fdevelopers.slashdot.org% 2Fstory%2F13%2F01%2F10%2F1540202%2Fjava-zero-day-vulnerability-rolled-into-exploit-packs%3Futm_source%3Dslashdot%26utm_medium%3Dfaceb ook) http://www.gstatic.com/images/icons/gplus-16.png (http://plus.google.com/share?url=http://developers.slashdot.org/story/13/01/10/1540202/java-zero-day-vulnerability-rolled-into-exploit-packs?utm_source=slashdot&utm_medium=googleplus)

Read more of this story (http://developers.slashdot.org/story/13/01/10/1540202/java-zero-day-vulnerability-rolled-into-exploit-packs?utm_source=rss1.0moreanon&utm_medium=feed) at Slashdot.
http://slashdot.feedsportal.com/c/35028/f/647376/s/27646e25/mf.gif

http://da.feedsportal.com/r/151884266867/u/49/f/647376/c/35028/s/27646e25/a2.img (http://da.feedsportal.com/r/151884266867/u/49/f/647376/c/35028/s/27646e25/a2.htm)http://pi.feedsportal.com/r/151884266867/u/49/f/647376/c/35028/s/27646e25/a2t.imghttp://feeds.feedburner.com/~r/Slashdot/slashdotDevelopers/~4/4-PznVYkKto

More... (http://rss.slashdot.org/~r/Slashdot/slashdotDevelopers/~3/4-PznVYkKto/story01.htm)