Anmonymous and LulzSec have launched a couple of DDoS attacks against high-profile institutions. Trojan disguised as a Java update can be downloaded from a multitude of locations, most of them being legitimate websites that have been infected by the tool. Trojan seems to have a dedicated infection technique for each PC user. Trojan can also spread via P2P shared folders, USB drives, Local Area Networks, MSN, or even send itself via e-mail messages, if the system has Outlook Express installed.”]
Source: https://www.bitdefender.com/blog/hotforsecurity/fake-java-update-uses-your-pc-in-ddos-offensive/