Dockster Mac Malware Targets Dalai Lama Website Through Flashback Vulnerability

🗓️ 03 Dec 2012 21:00:02Reported by Michael MimosoType

Dockster Mac Malware Targets Dalai Lama Website Through Flashback Vulnerability. Mac malware targeting Tibetan supporters is being served on a website connected to the Dalai Lama. The Dockster Trojan exploits the same Java vulnerability as the Flashback Trojan and tries to exploit a vulnerability patched in April by Apple

Reporter	Title	Published	Views	Family All 284
zdt	Java AtomicReferenceArray Type Violation Vulnerability	30 Mar 201200:00	–	zdt
FreeBSD	Java 1.7 -- security manager bypass	27 Aug 201200:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Unspecified Vulnerabilities in Rational Synergy (CVE-2012-0502,CVE-2012-0503,CVE-2012-0506,CVE-2012-0507,CVE-2011-3563,CVE-2012-0500,CVE-2012-0497,CVE-2012-0498,CVE-2012-0499,CVE-2012-0500,CVE-2012-0501,CVE-2012-0505,CVE-2011-5035)	22 Dec 202017:41	–	ibm
IBM Security Bulletins	Potential Security Vulnerabilities With JavaTM SDKs	17 Jun 201814:05	–	ibm
Tenable Nessus	Oracle Java SE 7 <= Update 6 Code Execution	27 Aug 201200:00	–	nessus
Tenable Nessus	CentOS 6 : java-1.6.0-openjdk (CESA-2012:0135)	16 Feb 201200:00	–	nessus
Tenable Nessus	CentOS 6 : java-1.7.0-openjdk (CESA-2012:1223)	6 Sep 201200:00	–	nessus
Tenable Nessus	Debian DSA-2420-1 : openjdk-6 - several vulnerabilities	29 Feb 201200:00	–	nessus
Tenable Nessus	Fedora 18 : java-1.7.0-openjdk-1.7.0.6-2.3.1.fc18.2 (2012-13100)	18 Sep 201200:00	–	nessus
Tenable Nessus	Fedora 17 : java-1.7.0-openjdk-1.7.0.6-2.3.1.fc17.2 (2012-13131)	4 Sep 201200:00	–	nessus

Source	Link
threatpost	www.threatpost.com/dockster-mac-malware-targets-dalai-lama-website-through-flashback-vulnerability-120312/
f-secure	www.f-secure.com/weblog/archives/00002466.html
nakedsecurity	www.nakedsecurity.sophos.com/2012/12/03/dockster-mac-malware-dalai-lama/
threatpost	www.threatpost.com/dalai-lamas-birthday-used-bait-targeted-attacks-070512/
threatpost	www.threatpost.com/new-trojan-mac-used-attacks-tibetan-ngos-032112/
nakedsecurity	www.nakedsecurity.sophos.com/2012/04/04/apple-patches-java-hole-that-was-being-used-to-compromise-mac-users/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
threatpost	www.threatpost.com/flashback-mac-trojan-hits-more-500k-machines-040512/
threatpost	www.threatpost.com/flashback-trojan-now-disabling-mac-xprotect-101911/
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

17 Apr 2013 16:31Current

10High risk

Vulners AI Score10

EPSS0.98536