Java and Ransomware - what’s in it for you
summary
Explains how attackers reach remote code execution through phishing, CVEs and supply‑chain vectors like typo‑squatting, dependency confusion and malicious commits to open source; cites Log4j as a recent RCE gateway (Deep Panda exploited it) and shows Maven Central telemetry: ~43 million Log4j downloads with ~36% still vulnerable. Describes RaaS marketplaces, double‑encryption extortion, real deaths and companies ruined, and recommends scanning fat jars, detecting copied classes and testing tools. remote code execution, dependency confusion, fat‑jar detection
AI-written summary · about
chapters (8)
- 0:00Start
- 2:05The Crime Scene
- 13:04Remote Code Execution
- 27:00Open Source Repo Attacks
- 32:08Equifax
- 34:17Root Kits
- 36:06Log4j
- 45:08Proof of Concept Attacks
related talks
02h 38mJava application security the hard way - a workshop for the serious developer
46mThe Anatomy of Java Vulnerabilities
49mThe Anatomy of Java Vulnerabilities
56mThe Anatomy of Java Vulnerabilities
46mLive hacking: Breaking into your Java web app
50mStranger Danger: Your Java Attack Surface Just Got Bigger
01h 06mLive hacking: Breaking into your Java web app
49mWargames - Java vulnerabilities and why you should care