Home Malware Programs Trojans JAVA_EXPLOIT.ZC

JAVA_EXPLOIT.ZC

Posted: July 17, 2013

Threat Metric

Threat Level: 5/10
Infected PCs: 14
First Seen: July 17, 2013
Last Seen: May 22, 2023
OS(es) Affected: Windows

JAVA_EXPLOIT.ZC is a Trojan/ Java exploit that is included in a malware attack using exploit kits (particularly Java and PDF exploits) for delivering file infectors onto targeted computer systems in the United States. JAVA_EXPLOIT.ZC downloads and runs a file infector detected as PE_EXPIRO.JX-O. JAVA_EXPLOIT.ZC spreads as a component packed with malware packages. JAVA_EXPLOIT.ZC may be hosted on a malicious website, which contains an exploit kit and executed when a PC user accesses the said website. JAVA_EXPLOIT.ZC requires its main component to successfully fulfill its intended routine. JAVA_EXPLOIT.ZC connects to the certain websites to download and run a malicious file. JAVA_EXPLOIT.ZC takes advantage of Oracle Java Runtime Environment Remote Code Execution Vulnerability (CVE-2013-1493) to download possibly malicious files. JAVA_EXPLOIT.ZC can also take advantage of CVE-2012-1723 to download the infector PE_EXPIRO.JX-O.The user is lured to a malicious site which contains an exploit kit. Several exploits are used; one of these is a Java exploit (detected as JAVA_EXPLOIT.ZC) which uses CVE-2012-1723. Another Java vulnerability (CVE-2013-1493) is also being used. A PDF exploit is also being used, with the malicious PDF file detected as TROJ_PIDIEF.JXM.

Loading...