{"id":643199,"date":"2013-02-20T13:44:23","date_gmt":"2013-02-20T18:44:23","guid":{"rendered":"http:\/\/gigaom.com\/?p=612258"},"modified":"2013-02-20T13:44:23","modified_gmt":"2013-02-20T18:44:23","slug":"site-used-in-malware-attack-on-apple-facebook-explains-how-it-happened","status":"publish","type":"post","link":"https:\/\/mereja.media\/index\/643199","title":{"rendered":"Site used in malware attack on Apple, Facebook explains how it happened"},"content":{"rendered":"

The owner of a website that was a conduit used by hackers to breach employee computers at both Facebook and Apple has come forward to explain the events that took place last month. Ian Sefferman, co-founder of the iPhoneDevSDK website, said Wednesday in a blog post that he’d found evidence that the targeted attack came from an administrator account on his website that was compromised.<\/p>\n

Though Sefferman says he believes the site is no longer infected, it’s safer not to visit the site for now — hence no link. Here’s how MacRumors reported Sefferman’s statement<\/a>:<\/p>\n

\n

What we’ve learned is that it appears a single administrator account was compromised. The hackers used this account to modify our theme and inject JavaScript into our site. That JavaScript appears to have used a sophisticated, previously unknown exploit to hack into certain user’s computers.<\/p>\n

We’re still trying to determine the exploit’s exact timeline and details, but it appears as though it was ended (by the hacker) on January 30, 2013.<\/p>\n<\/blockquote>\n

He says he doesn’t believe any his site’s user data was actually compromised.<\/p>\n

AllThingsD\u00a0<\/a>was the first to report iPhoneDevSDK’s involvement in the attack.<\/p>\n

Both Apple and Facebook blamed Java<\/a>: each reported recently that some of their employees’ computers were infected by malware<\/a> from a vulnerability in a Java browser plug-in. Apple has since released a software patch for Java for OS X. Both companies say no user data was stolen.<\/p>\n

\"\"<\/p>\n

<\/a><\/p>\n

Related research and analysis from GigaOM Pro:<\/strong>
Subscriber content. Sign up for a free trial<\/a>.<\/p>\n