The attack is simply a mashup of a GIF picture and a JAR (Java applet ... Sun could restrict their Virtual Machine or web applications could continually check and filter these hybrid files ...