Use Of Java/Flash Leads to more SEO Spams

The report describes a spam SEO poisoning campaign that compromises legitimate sites to serve obfuscated, multi-stage Java and Flash exploits which can execute drive-by (no user interaction). Attackers use automated JAR/ActiveX and Flash heap-spray techniques and a one-time-per-IP redirect/obfuscation workflow to evade security tools and hinder post-infection analysis.