Isn’t it ironic getting a Java exploit via java.com, the primary source for one of the most common used browser plugins? Current malvertising campaigns are able to do this. This blog post details a relatively new trend: real-time advertisement bidding platforms being infiltrated by cyber criminals spreading malware.
more here.............http://blog.fox-it.com/2014/08/27/malvertising-not-all-java-from-java-com-is-legitimate/
more here.............http://blog.fox-it.com/2014/08/27/malvertising-not-all-java-from-java-com-is-legitimate/