New Java 0-Day Attack Echoes Bit9 Breach
Summary: FireEye and CyberESI found a new Java zero-day, exploited in the latest versions Java 6 Update 41 and Java 7 Update 15, that downloaded a remote access Trojan called McRat, also known as HiKit and Mdmbot.F. FireEye said the malware and its control server at 110.173.55.187 match those used in the Bit9 breach, and researcher Alex Lanstein said the same group likely hit both.
Why it matters: A patch for Java 6.x will not be released because the version is end-of-life, leaving businesses with v6.x dependencies extremely vulnerable from this point on unless they buy Oracle Java SE Support.
Read the original at Krebs on Security ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026