Facebook reveals it was hacked, but says no user data compromised

securityFacebook today detailed a malware attack that occurred last month, but which has been remediated and reportedly did not result in any user data being compromised.

Facebook says the attack originated when some employees visited a mobile developer website that had been compromised and led malware to be installed on the employees’ laptops. After the company’s security team identified the malicious file, it flagged other infected laptops and removed the malware. Facebook says it informed law enforcement and is continuing an investigation along with others who were attacked. The company did not name other companies who were infiltrated this way, but it says it was not alone.

Facebook says it has “found no evidence” that user data was compromised. According to Ars Technica, which spoke to Facebook Chief Security Officer Joe Sullivan, the attackers gained “some limited visibility” into Facebook’s production systems as well as some corporate data, email and software code from the laptops themselves, but this did not lead to any extraction of user information.

Facebook explained the attack as a ”zero-day” exploit, meaning it exploited a previously unknown vulnerability. The attackers used what is called a “watering hole” attack, compromising the server of a popular mobile developer forum and using it to spread the malware to site visitors who had Java enabled in their browser. Antivirus software was unable to detect the malware because it was new. However, Facebook says it reported the exploit to Oracle, which owns the Java SE platform, and the company provided a patch on Feb. 1.

Facebook says it will continue to work with law enforcement and the other organizations who were affected by the attack, and it reminded users to report any security vulnerabilities to its Bug Bounty Program.

Tumblr Marketing

Mediabistro Course

Tumblr Marketing

Starting December 1, learn how to market using the most popular visual blog! In this course, you’ll learn how to develop a strategy for your own Tumblr account, get people to read and share your content, and integrate your marketing efforts with other social platforms. Register now!

 

Leave a Reply

Get the latest news in your inbox
interested in advertising with inside facebook?

Social Media Jobs
of the Day

Director of Marketing

Broadway Across America
Baltimore, MD

Featured Company

Join leading companies like this one and recruit from the nation's top media job seekers on the Mediabistro Job Board. Every job post comes with our satisfaction guarantee. Learn More
 

Our Sponsors

Mediabistro A division of Prometheus Global Media home | site map | advertising/sponsorships | careers | contact us | help courses | browse jobs | freelancers | content | member benefits | reprints & permissions terms of use | privacy policy Copyright © 2014 Mediabistro Inc. call (212) 389-2000 or email us