Resources Blog Attackers Go Phising For Payroll Workers With Java ...

Attackers Go Phising For Payroll Workers With Java CVE-2012-1723 Exploit

Threatpost – (International) Attackers go phishing for payroll workers with Java CVE-2012-1723 exploit. Java flaw CVE-2012-1723 that Oracle patched in June has been the target of several pieces of malware and Web-based attacks recently. Now researchers indicate there is a phishing scam targeting payroll and HR employees that involves an exploit for the Java bug as well. The latest version of this kind of attack is using a scare tactic, telling recipients of the phishing email the certificate they use to access their payroll system is about to expire and needs to be renewed. If the user clicks on the embedded link, they will end up on a site serving a variety of exploits, including one for the Java flaw.


Picture of Ali Loney

Written by Ali Loney

Ali Loney is a Senior UX Designer at Walmart Labs. She is based in Canada and was the former Graphic Designer at Sonatype.