Malwarehigh
SabPub Mac OS X Backdoor: Java Exploits, Targeted Attacks and Possible APT link
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2012-0507 | Type Confusion RCE in Oracle Java SE Concurrency Component | — | 98% | KEVRansomware | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | onedumb.com | t, CA. Encoded C&C address (“hostname_en”) in the backdoor “Onedumb.com” is a free dynamic DNS service. Interesting, the C&C at IP |
From the original article
2 min read at securelist.com
Last week, Apple released two urgent updates to Mac OS X to: 1. Remove the Flashback malware about which we have already written 2. Automatically deactivate the Java browser plugin and Java Web Start, effectively disabling java applets in browsers
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.