Cybercriminals using digitally signed Java exploits to trick users