Plugrush exploit trojan
 

Campaign 5393 for german pops has java trojan. Now my comp is fucked up. Posting from myy phone which I fucking hate!!!

Avast blocked the url but it loaded anyway. I was submitting a ticket when it went black and loaded the extorting screen. Please fix this asap!!!

:( :( :(

I am looking into this now, will post more when I figure out what is going on.

EDIT: Looks like the website associated with this campaign has been infected, and we have killed the campaign for the time being until the owner can tell us what is going on. Thanks for the heads up guys.

Didn't affect my Mac, luckily, but question: is this only if it's CLICKED? If not, I'll disable my PlugRush stuff until it's solved.

It's not going to affect anyone because this campaign has been killed. Looks like it's a huge exploit in Java:

https://krebsonsecurity.com/2012/08/...-java-exploit/

fast service :)

yes that's the issue at hand here. I will be disabling java from now on unless necessary. Got my comp fixed though.

BIG props to plugrush for fast mitigation of issue. You guys rock. :thumbsup

Who uses java anyway?

90% of computers smart ass :321GFY

:1orglaugh So what if 90% of all computer has java installed? That does not mean 90% of all people are USING it! Only 4% of all websites uses it server side, but that is not really relevant. What is, is that almost no sites still use java applets. Unless you are stuck in the nineties or are obligated to use an ancient site that uses java applets, running java in your browser is stupid. Almost no sites require it and if you do run it, you are putting yourself at risk. This is not the first java exploit and it will not be the last.