New Java Vulnerability exploited to distribute Reveton Ransomware.

waddler_8

http://blog.malwarebytes.org/intelligence/2013/01/cta-unpatched-java-exploit-in-the-wild/

Lum

Yup. People really ought to, at the very least, disable the browser plugin. Reall you should just remove Java completely; there is little useful stuff out there that uses it and you can always reinstall it if you find you need it.

Instructions to get rid of Java:

Disable Java in Internet Explorer
Disable Java in Firefox, Waterfox, Pale Moon etc.
Disable Java in Chrome, Chromium, Iron etc.
Disable Java in Safari
Disable Java in Opera

waddler_8

Patched.

Release notes: http://www.oracle.com/technetwork/java/javase/7u11-relnotes-1896856.html

Download: http://www.java.com/getjava/

Disabling Java in all browsers through the Java Control Panel: http://www.java.com/en/download/help/disable_browser.xml

Lum

waddler_8 wrote: »

Patched.

...until the next one.. See you all on Thursday.

waddler_8

Lum wrote: »

...until the next one..

https://threatpost.com/en_us/blogs/latest-java-update-broken-two-new-sandbox-bypass-flaws-found-011813?

We have successfully confirmed that a complete Java security sandbox bypass can be still gained under the recent version of Java 7 Update 11

joe134

waddler_8 wrote: »

https://threatpost.com/en_us/blogs/latest-java-update-broken-two-new-sandbox-bypass-flaws-found-011813?

Hi waddler, I,ve a couple of programs need java, I updated it Wed, but have removed it totally from control, add/remove, Is that it all off now? use chrome/ ie/ aol browsers
Never had any bother with it, except updating all the time.edit; It,s gone from CP.;;;cheers

Lum

waddler_8 wrote: »

https://threatpost.com/en_us/blogs/latest-java-update-broken-two-new-sandbox-bypass-flaws-found-011813?

Ok, so they made it until Friday, not Thursday.

I was close!

mattytun

Ive never had Java for months and so far so good...