First thoughts on (what looks to be) the building blocks for getting a user to download a malicious browser plugin that looks like the Java plugin.