[SecList]Blog: Red October - Java Exploit Delivery Vector Analysis

[igor51]

Blog: Red October - Java Exploit Delivery Vector Analysis

Since the publication of our report, our colleagues from Seculert have discovered and posted a blog about the usage of another delivery vector in the Red October attacks.
In addition to Office documents (CVE-2009-3129, CVE-2010-3333, CVE-2012-0158), it appears that the attackers also infiltrated victim network(s) via Java  exploitation (35f1572eb7759cb7a66ca459c093e8a1 - NewsFinder.jar), known as the Rhino exploit (CVE-2011-3544).
Source: Blog: Red October - Java Exploit Delivery Vector Analysis