Just days after Google researcher Tavis Ormandy released details on a dangerous new Java vulnerability, malicious hackers have pounced and are exploiting the flaw in the wild to launch drive-by download attacks. Virus hunters have spotted the attacks on a popular song lyrics Web site. Any visitor to that Web site with the Java plugin for Browsers installed (Internet Explorer or Firefox) will get infected with malware. The main lure so far seems to be a song lyrics publishing site, with Rihanna, Usher, Lady Gaga and Lady Gaga being used.
Source: https://threatpost.com/java-zero-day-attacks-wild-041410/73829/