Java is a favorite target of cybercriminals because it is so easy to exploit, and also because users are frequently using outdated versions of it. "In many cases, simply tricked the users into believing that their Java web applets were actually Java software updates from Apple, Inc."
"Later on in the distributions, the Flashfake operators abused the vulnerabilities in those Java installs and new installs by delivering Java exploits from malicious websites," said Kurt Baumgartner, senior security researcher with Moscow-based Kaspersky Lab. (Java is not bundled into "clean" installations of Lion, but can be added later.) Java was bundled into Apple's Mac OS X 10.6 Snow Leopard by default, and kept on if a Mac user upgraded his machine from Snow Leopard to Mac OS X 10.7 Lion.
Java has a long history of security vulnerabilities, which are now coming to the public's attention because of the widespread infection of Macs in late March by the Flashback, also called Flashfake, malware family.
0 kommentar(er)
