compromised version of [http:]//cdn.afghanistan[.]af/scripts/gop-script.js as [http:]//update.javaplugin[.]com/o/j.js, confirming that this Java malware is in fact directly associated with the Afghan MCIT