Facebook reveals it was hacked, but says no user data compromised

securityFacebook today detailed a malware attack that occurred last month, but which has been remediated and reportedly did not result in any user data being compromised.

Facebook says the attack originated when some employees visited a mobile developer website that had been compromised and led malware to be installed on the employees’ laptops. After the company’s security team identified the malicious file, it flagged other infected laptops and removed the malware. Facebook says it informed law enforcement and is continuing an investigation along with others who were attacked. The company did not name other companies who were infiltrated this way, but it says it was not alone.

Facebook says it has “found no evidence” that user data was compromised. According to Ars Technica, which spoke to Facebook Chief Security Officer Joe Sullivan, the attackers gained “some limited visibility” into Facebook’s production systems as well as some corporate data, email and software code from the laptops themselves, but this did not lead to any extraction of user information.

Facebook explained the attack as a ”zero-day” exploit, meaning it exploited a previously unknown vulnerability. The attackers used what is called a “watering hole” attack, compromising the server of a popular mobile developer forum and using it to spread the malware to site visitors who had Java enabled in their browser. Antivirus software was unable to detect the malware because it was new. However, Facebook says it reported the exploit to Oracle, which owns the Java SE platform, and the company provided a patch on Feb. 1.

Facebook says it will continue to work with law enforcement and the other organizations who were affected by the attack, and it reminded users to report any security vulnerabilities to its Bug Bounty Program.

Social Media 101

Mediabistro Course

Social Media 101

Get hands-on social media training for beginners in our online boot camp, Social Media 101! Starting September 4, social media and marketing experts will teach you the best practices to be successful on social. Hurry, this boot camp starts next week! Register now!

 

Leave a Reply

Get the latest news in your inbox
interested in advertising with inside facebook?

Social Media Jobs
of the Day

Creative Director for Web Design

3D Systems
Rock Hill, SC

Web Editor, Eat This Not That

Eat This Not That
New York, NY

Web Developer/Digital Analyst

Washingtonian
Washington, DC

Web Developer

mediabistro.com
New York, NY

Junior Web Engineer

MakerBot Industries
Brooklyn, NY

Featured Company

Join leading companies like this one and recruit from the nation's top media job seekers on the Mediabistro Job Board. Every job post comes with our satisfaction guarantee. Learn More
 

Our Sponsors

Mediabistro A division of Prometheus Global Media home | site map | advertising/sponsorships | careers | contact us | help courses | browse jobs | freelancers | content | member benefits | reprints & permissions terms of use | privacy policy Copyright © 2014 Mediabistro Inc. call (212) 389-2000 or email us