Image
 
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 29 guests and 3 members online
EH-Net Donations

Enter Amount:
$

Google Ads
EH-Net News Feeds
Latest Additions
Book Recommendations





 
Advertisement

You are here: Home arrow Forum arrow Ethical Hacking Discussions and Related Certificationsarrow Malwarearrow Mac Users Get Clipboard-Jacked At Digg, Facebook
Ethical Hacker Community Forums
January 07, 2009, 11:48:07 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: ChicagoCon 2-Day Ethical Hacking Conference with MS Blue Hats Oct 31 - Nov 1. Tickets Only $100! www.chicagocon.com/content/view/103/51/
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Mac Users Get Clipboard-Jacked At Digg, Facebook  (Read 952 times)
0 Members and 1 Guest are viewing this topic.
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 2435


Editor-In-Chief


View Profile WWW
« on: August 21, 2008, 12:49:49 PM »

From Larry Seltzer's Security Blog on PCMag:

Quote
Macs don't actually get attacked by malicious code, right? No, they do, even if it is a comparatively rare thing.

Consider this support thread on apple.com in which a Mac user using Firefox complains about how his clipboard gets hijacked. Once he visits a certain site, a top-level link off of digg.com, his clipboard gets stuffed with a malicious link (to Windows malware) and nothing else can change the clipboard contents.

Oh yes, that's right, Firefox also gets attacked now and then, despite conventional wisdom to the contrary.

Other readers piped up to relate similar circumstances on other sites, including Facebook and lime.com. In fact, this attack was first reported about a week ago on the Spyware Sucks blog. Of course it is meant to target Windows systems and works well on them too.

If you think you are experiencing this attack take note of what sites you have open. One reader reported that the attack was only active while the page was open. So you should eventually be able to end it by closing browser windows one at a time.

There is a security setting for Internet Explorer to block/allow programmatic access to the clipboard, and the default is to prompt the user. You can test this harmlessly at tinyurl.com.



Back on the Spyware Sucks blog entry comments indicate that the prompt setting isn't working; users are getting attacked in spite of this setting. We can't confirm this.

Original story:
http://blogs.pcmag.com/securitywatch/2008/08/mac_users_get_clipboardjacked.php

Don
Logged

CISSP, MCSE, CEH, Security+ SME
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.7 | SMF © 2006-2008, Simple Machines LLC
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.029 seconds with 23 queries.
 
Sponsors

cwnp_moto__120x90.gif

Polls
How many security events including conferences and training do you attend a year:
 
Support EH-Net


Support EH-Net by
Buying all of your
Amazon items using
the search bar above.

cbtnuggets_logo_125.jpg
Try CBT Nuggets Free!
Recent Forum Topics
Vote For EH-Net

progenic.com
Click here to Vote!

binarica.com
Binarica Logo

Add to Technorati Favorites
technorati fave

 
         
Advertisement

© 2009 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.