New Java trojan attacks Mac OS X via social networking sites
arstechnica.com
New Java trojan attacks Mac OS X via social networking sites
1–10 of 27 posts
Re: New Java trojan attacks Mac OS X via social networking sites
#2From another source, clicking on link appears to shown a certification error dialog[1].
[1]: http://www.macrumors.com/2010/10/27/new-java-based-malware-t...
Re: New Java trojan attacks Mac OS X via social networking sites
#3It seems to imply that once the link is clicked it downloads and runs the payload automatically, but this is rather hard to believe (I would guess that there is some user action required).
Is the article correct?
Re: New Java trojan attacks Mac OS X via social networking sites
#4It seems to imply that once the link is clicked it downloads and runs the payload automatically, but this is rather hard to believe (I would guess that there is some user action required). Is the article correct?
Drive by download & execute vulnerabilities exist in Java for many browsers.
So yes, it is possible for the "trojan" to work as described.
Re: New Java trojan attacks Mac OS X via social networking sites
#5What antivirus/security software do other HNers use on their Macs, if anything?
Re: New Java trojan attacks Mac OS X via social networking sites
#6What antivirus/security software do other HNers use on their Macs, if anything?
Right now, common sense.
I'll move to Arch if I need to install anything else that remotely resembles bloat.
Re: New Java trojan attacks Mac OS X via social networking sites
#7Chrome users, enter 'about:plugins' in your address bar to disable Java.
(Users of other browsers, you can usually find what you need in preferences.)
Re: New Java trojan attacks Mac OS X via social networking sites
#8FTA:
> A new trojan horse has cropped up that affects Mac OS X (and Windows as well).
Perhaps noteworthy in the title.
Re: New Java trojan attacks Mac OS X via social networking sites
#9Underlying requirement: that the user running the applet is an administrator (and while this is the default modus operandi as per the installation procedure of OS X, not every OS X user continues on this path).
Re: New Java trojan attacks Mac OS X via social networking sites
#10Since no one else is going to say it...
Suddenly it doesn't seem like such a bad idea to remove Java from OS X. I for one can go without any applets and even minecraft on my macbook pro.