Feeds

Facebook devs HACKED in 'sophisticated' Java zero-day attack

Company laptops impounded, no evidence user data compromised

Top 5 reasons to deploy VMware with Tegile

Facebook has been hacked, but the company has found no evidence that user data was affected.

Facebook's systems were "targeted in a sophisticated attack" in January after some of the company's developers visited a mobile-developer website that had been compromised, the company wrote on Friday afternoon.

Malware was installed onto fully-patched Facebook laptops via a Java zero-day vulnerability – a vuln that Oracle patched on February 1.

"As soon as we discovered the presence of the malware, we remediated all infected machines, informed law enforcement, and began a significant investigation that continues to this day," the company wrote.

Facebook realized that the hack had occurred when its security team found a "suspicious" domain within the company's corporate DNS logs that was tracked back to a company laptop.

"Upon conducting a forensic examination of that laptop, we identified a malicious file, and then searched company-wide and flagged several other compromised employee laptops," Facebook reports.

Other companies were targeted in this attack as well, though Facebook did not disclose who. It has formed a working group to share information among the affected parties.

The company is working with law enforcement and other entities to prevent further attacks, it said, and encouraging people to submit security vulnerabilities affecting Facebook to the company's Bug Bounty Program. ®

Secure remote control for conventional and virtual desktops

Whitepapers

Go beyond APM with real-time IT operations analytics
How IT operations teams can harness the wealth of wire data already flowing through their environment for real-time operational intelligence.
The total economic impact of Druva inSync
Examining the ROI enterprises may realize by implementing inSync, as they look to improve backup and recovery of endpoint data in a cost-effective manner.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Mitigating web security risk with SSL certificates
Web-based systems are essential tools for running business processes and delivering services to customers.