According to KrebsonSecurity – a blog maintained by investigative journalist Brian Krebs – the creator of Blackhole, using the nickname “Paunch,” announced on Jan. 9 his exploit kit would be the first to include the weapon against Java. The maker of Nuclear Pack made a similar announcement soon after. Both crimeware creators claimed the security hole exists in all versions of Java 7, including the latest update.