{"id":973,"date":"2013-02-15T16:43:07","date_gmt":"2013-02-16T00:43:07","guid":{"rendered":"http:\/\/www.infosecurity.pro\/?p=973"},"modified":"2019-04-20T16:25:09","modified_gmt":"2019-04-20T16:25:09","slug":"facebook-developers-hit-by-java-malware","status":"publish","type":"post","link":"https:\/\/www.infosecurity.pro\/?p=973","title":{"rendered":"Facebook developers hit by Java malware"},"content":{"rendered":"

\t\t\t\t Facebook[\/caption]\nFacebook has posted that\u00a0several of its\u00a0mobile developers had experienced a sophisticated breach by having computers infected with malware.\u00a0 It now claims to have cleaned up the infected machines and is\u00a0collaborating with law enforcement on the incident.\u00a0 Facebook encourages people to submit vulnerabilities to their Bug Bounty Program.<\/a>\nFriday, February 15, 2013 at 1:29pm, Facebook posted:\n\n\n

We have found no evidence that Facebook user data was compromised.<\/strong>…we flagged a suspicious domain in our corporate DNS logs and tracked it back to an employee laptop. Upon conducting a forensic examination of that laptop, we identified a malicious file, and then searched company-wide and flagged several other compromised employee laptops.\nAfter analyzing the compromised website where the attack originated, we found it was using a “zero-day” (previously unseen) exploit to bypass the Java sandbox (built-in protections) to install the malware. We immediately reported the exploit to Oracle, and they confirmed our findings and provided a patch on February 1, 2013, that addresses this vulnerability…<\/blockquote>\n\n\n\n