[CVE-2013-0422] Zero-Day Java Exploit

Zero-Day Java Exploit Debuts in Crimeware

원문 : http://krebsonsecurity.com/2013/01/zero-day-java-exploit-debuts-in-crimeware/

The hackers who maintain Blackhole and Nuclear Pack – competing crimeware products that are made to be stitched into hacked sites and use browser flaws to foist malware — say they’ve added a brand new exploit that attacks a previously unknown and currently unpatched security hole in Java.

중략!

0 day 1.7u10 (CVE-2013-0422) spotted in the Wild-Disable Java Plugin NOW !

원문 : http://malware.dontneedcoffee.com/2013/01/0-day-17u10-spotted-in-while-disable.html

Was wondering what to do with that...
Disclose, do not Disclose.

Hundreds of thousands of hits daily where i found it. This could be a mayhem.
I think it's better to make some noise about it. Will write more details here later with images and so on, once situation will be less critical.

중략!