Malicious .jar Files Hosted On Google Code

Zscaler observed malicious Java .jar files (update.jar and Client.jar, MD5 0521c911e442cd9eec927d8439731a76) hosted on Google Code and other free hosting services; the files behave as downloaders, have mixed detection on VirusTotal (28/45) and are flagged strongly by ZULU, indicating attackers are leveraging reputable hosting to distribute malware and suggesting inadequate content validation by the hosting provider.