{"id":3472,"date":"2013-02-21T20:10:15","date_gmt":"2013-02-21T20:10:15","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=3472"},"modified":"2015-09-09T19:36:55","modified_gmt":"2015-09-09T11:36:55","slug":"apple-facebook-hundreds-more-hacked-by-0-day-java-exploit","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2013\/02\/apple-facebook-hundreds-more-hacked-by-0-day-java-exploit\/","title":{"rendered":"Apple, Facebook & Hundreds More Hacked By 0-Day Java Exploit"},"content":{"rendered":"

There’s an awful lot of high profile hacks going on lately, with some people linking them to the Chinese and a large-scale attack on Western companies. Before this, Twitter Breach Leaks 250,000 User E-mails & Passwords<\/a> – was probably the most high profile case.<\/p>\n

Now Apple<\/a>, Facebook<\/a> and quite possibly hundreds of other companies have been hit by a drive by browser exploit in Java on the Mac OSX platform.<\/p>\n

Apple has already issued an update for this vulnerability and also a malware scanner which will detect common variations of the infection.<\/p>\n

Apple, Facebook and “hundreds of other companies” have had their Mac computers hacked in a sophisticated campaign mounted by an unknown adversary.<\/p>\n

Attackers were able to infect Apple, along with other businesses around the world with Mac malware delivered via a Java zero-day vulnerability, Reuters reported on Tuesday, after receiving information from a source at Apple.<\/p>\n

The hack used the same Java zero-day and associated Mac malware as the one which Facebook disclosed last week, the Apple source indicated.<\/p>\n

Hundreds of companies, including defense contractors, have been infected with the same malicious software, the source said.<\/p>\n

“This is the first really big attack on Macs,” Reuters’s source said, “Apple has more on its hands than the attack on itself.”<\/p>\n

Apple plans to release a software tool to detect and remove the Java-related malware, the company said in a statement to AllThingsD. Java has not shipped with Macs since the release of OS X Lion.<\/p><\/blockquote>\n

The whole Chinese hacker thing is a bit of a media frenzy though, as you’d know if you’ve been reading this site for a while – these attacks have been going for a while.<\/p>\n

Mandiant is not helping the situation either with their 60 page report on Chinese hacking on American companies – Mandiant gains instant fame after Chinese hack report<\/a>.<\/p>\n