"Pawn Storm" - dangerous Java hack

[digidog]

A suspected Russian government hacking team is exploiting a previously unknown Java vunerablity using the domain "electronicfrontierfoundation.org" in phishing emails. The genuine Electronic Frontier Foundation address is eff.org

Oracle has now patched the exploit but if you haven't updated your Java for a while, now might be a good time to do that.

Or you could join the smart team and just disable Java altogether.