Cyber Risks · Krebs on Security

Koobface Worm Targets Java on Mac OS X

Summary: A new Mac OS X version of the Koobface worm is spreading through Facebook, MySpace and Twitter, served via a malicious Java applet that prompts users to install it, according to Intego. Once allowed, the software runs a local web server and an IRC server, joins a botnet, acts as a DNS changer, and spreads by posting links to video messages; SecureMac calls the same threat OSX.Boonana.a, and Paretologic researchers reported it can also infect Linux systems with Java installed.

Why it matters: The attack worked because Java runs the same way on every operating system, so a single applet could deliver platform-specific malware to Macs that users assumed were not targets - and Apple had already deprecated Java on OS X, meaning less upkeep ahead.

Read the original at Krebs on Security ↗

Topics
Malware
Related