{"id":738788,"date":"2013-02-20T13:44:23","date_gmt":"2013-02-20T18:44:23","guid":{"rendered":"http:\/\/gigaom.com\/?p=612258"},"modified":"2013-02-20T13:44:23","modified_gmt":"2013-02-20T18:44:23","slug":"site-used-in-malware-attack-on-apple-facebook-explains-how-it-happened","status":"publish","type":"post","link":"https:\/\/mereja.com\/index\/738788","title":{"rendered":"Site used in malware attack on Apple, Facebook explains how it happened"},"content":{"rendered":"

The owner of a website that was a conduit used by hackers to breach employee computers at both Facebook and Apple has come forward to explain the events that took place last month. Ian Sefferman, co-founder of the iPhoneDevSDK website, said Wednesday in a blog post that he’d found evidence that the targeted attack came from an administrator account on his website that was compromised.<\/p>

Though Sefferman says he believes the site is no longer infected, it’s safer not to visit the site for now — hence no link. Here’s how MacRumors reported Sefferman’s statement<\/a>:<\/p>

What we’ve learned is that it appears a single administrator account was compromised. The hackers used this account to modify our theme and inject JavaScript into our site. That JavaScript appears to have used a sophisticated, previously unknown exploit to hack into certain user’s computers.<\/p>

We’re still trying to determine the exploit’s exact timeline and details, but it appears as though it was ended (by the hacker) on January 30, 2013.<\/p><\/blockquote>

He says he doesn’t believe any his site’s user data was actually compromised.<\/p>

AllThingsD\u00a0<\/a>was the first to report iPhoneDevSDK’s involvement in the attack.<\/p>

Both Apple and Facebook blamed Java<\/a>: each reported recently that some of their employees’ computers were infected by malware<\/a> from a vulnerability in a Java browser plug-in. Apple has since released a software patch for Java for OS X. Both companies say no user data was stolen.<\/p>
\"\"

<\/a><\/p>

Related research and analysis from GigaOM Pro:<\/strong>
Subscriber content. Sign up for a free trial<\/a>.<\/p>