Hijacking Java Upgrade

upgrade_java_windows7_4

In this one, we will look at how to inject a malicious Java upgrade by using DNS poisoning to intercept the traffic. The best part of this whole hack, is that it’s almost impossible for the victim to figure out that the update is malicious, until it is too late. After all, how many of us security pros check with Wireshark, where a program is really connecting to, when it requests for an upgrade. What’s scary to see, is that popular softwares such as Notepad++ and Download Accelerator Plus (DAP) do not have a security update process. Millions of people who use these softwares are thus vulnerable! Continue reading “Hijacking Java Upgrade” »

Hijacking Java Upgrade

upgrade_java_windows7_4

In this one, we will look at how to inject a malicious Java upgrade by using DNS poisoning to intercept the traffic. The best part of this whole hack, is that it’s almost impossible for the victim to figure out that the update is malicious, until it is too late. After all, how many of us security pros check with Wireshark, where a program is really connecting to, when it requests for an upgrade. What’s scary to see, is that popular softwares such as Notepad++ and Download Accelerator Plus (DAP) do not have a security update process. Millions of people who use these softwares are thus vulnerable! Continue reading “Hijacking Java Upgrade” »

Hijacking Java Upgrade

upgrade_java_windows7_4

In this one, we will look at how to inject a malicious Java upgrade by using DNS poisoning to intercept the traffic. The best part of this whole hack, is that it’s almost impossible for the victim to figure out that the update is malicious, until it is too late. After all, how many of us security pros check with Wireshark, where a program is really connecting to, when it requests for an upgrade. What’s scary to see, is that popular softwares such as Notepad++ and Download Accelerator Plus (DAP) do not have a security update process. Millions of people who use these softwares are thus vulnerable! Continue reading “Hijacking Java Upgrade” »