New Mac malware exploits aged Java hole
One of a signatures Sophos says it has found
Security dilettante Sophos reports that it has detected new Mac malware that exploits a same Java hole in Mac OS X that was also used by a “Flashback” malware and has given been sealed by Apple. The backdoor trojan is called “OSX/Sabpab-A” and is pronounced to settle a HTTP tie to a authority control server once it has putrescent a computer. According to Sophos’s Graham Cluley, enemy afterwards have a ability to govern capricious commands, upload and download files, and take screenshots on putrescent systems.
The confidence organisation says that, like Flashback, OSX/Sabpab-A spreads around a web; apparently, simply visiting a antagonistic web page on a Mac with an unpatched chronicle of Java is all that’s compulsory to turn infected. Sophos provides no serve sum on a placement of a malware though has given it a low “prevalence” rating.
Users can strengthen their systems by installing a latest Java updates, that fixes a problem and automatically disables a Java web plugin by default; users can re-enable this around a Java Preferences focus (Applications ➤ Utilities ➤ Java Preferences).
See also:
- Critical Java hole being exploited on a vast scale, a news from The H.
- Flashback malware uses new infection technique, a news from The H.
(crve)