Re:New Java trojan attacks Mac OS X via social networking sites
by hackermom on Wednesday October 27, 2010 @06:31PM
(#1840741)
Underlying requirement: that the user running the applet is an administrator (and while this is the default modus operandi as per the installation procedure of OS X, not every OS X user continues on this path).
[ Parent
| on HN ]
Re:New Java trojan attacks Mac OS X via social networking sites
by msbarnett on Wednesday October 27, 2010 @07:02PM
(#1840835)
The user is also alerted when the applet tries to run, and they would need to approve the privilege escalation request for the applet; it has an untrusted, self-signed cert.
Re:New Java trojan attacks Mac OS X via social networking sites
by DavidSJ on Wednesday October 27, 2010 @07:09PM
(#1840870)
If true, this is a huge omission from the article. Got a source?
Re:New Java trojan attacks Mac OS X via social networking sites
by msbarnett on Wednesday October 27, 2010 @07:20PM
(#1840899)
Sure, here's a couple with less breathlessness, and more details:
http://www.intego.com/news/trojan-horse-os-x-koobface-a-affe...
http://www.tuaw.com/2010/10/27/security-alert-new-trojan-hor...