Hijacking Java Upgrades using EvilGrade and DNS Poisoning

We covered the EvilGrade Framework in detail, in a previous video. In this one, we will look at how to inject a malicious Java upgrade by using DNS poisoning to intercept the traffic. The best part of this whole hack, is that it's almost impossible for the victim to figure out that the update is malicious, until it is too late. After all, how many of us security pros check with Wireshark, where a program is really connecting to, when it requests for an upgrade. What's scary to see, is that popular softwares such as Notepad++ and Download Accelerator Plus (DAP) do not have a security update process. Millions of people who use these softwares are thus vulnerable!

You can download EvilGrade from InfoByte's website and give it a try!

Vivek Ramachandran is a security evangelist and has been working in computer security related fields for the past 7 years. In 2007, Vivek spoke at world renowned conferences Defcon (WEP Cloaking Exposed) and Toorcon (The Caffe Latte Attack). The discovery of the Caffe Latte Attack was covered by CBS5 news, BBC online, Network World etc news agencies.In 2006, Vivek was announced as one of winners of the Microsoft Security Shootout contest held in India among 65,000 participants. He has also been a recipient of a Team Achievement at Cisco Systems for his work on 802.1x and Port Security modules on the Catalyst 6500 switches. Currently he spends all of his time maintaining Security- Freak.Net , SecurityTube.Net and is the co-founder of Axonize. Vivek, is a Bachelor in Electronics and Communications Engineering from the prestigious Indian Institute of Technology, Guwahati.You can contact him at vivek[at]securitytube.net