Apple 公開表示公司內部 Mac 系統遭到駭客攻擊

Reuters 的報導，Apple 公司內部最近被駭客攻擊，有部分的 Mac 被惡意軟體感染。根據 Apple 在星期二公開此事時的說法⋯⋯

Apple has identified malware which infected a limited number of Mac systems through a vulnerability in the Java plug-in for browsers. The malware was employed in an attack against Apple and other companies, and was spread through a website for software developers. We identified a small number of systems within Apple that were infected and isolated them from our network. There is no evidence that any data left Apple. We are working closely with law enforcement to find the source of the malware.

Apple已經確定感染少數Mac系統的惡意軟體是透過瀏覽器的Java外掛漏洞所感染的。此惡意軟體被用於攻擊Apple與其他公司，並且是透過同一個軟體開發者網站所散佈。我們已經確認Apple內少數被感染的系統，並且已將這些系統從我們的網路內隔離。沒有任何證據表示有任何資料流出Apple，我們也正在與執法單位密切合作，找出惡意軟體的來源。

目前已知此惡意軟體是經由Java漏洞感染，並且設計專門用來攻擊Mac系統。同樣的惡意軟體在早前也被用來攻擊Facebook與Twitter公司內部，並且都是經由同一個iOS開發者社群網站「iPhone Dev SDK」散佈出去的。

另外，今天Apple也發佈了OSX的Java更新「Java for OS X 2013-001」。

總之，各位開發者們請多多小心，除了不上這個網站之外，要不就是至少先把瀏覽器的Java給關掉吧。

via Exclusive/ Apple, Macs hit by hackers who targeted Facebook | Reuters and Facebook, Apple employees likely visited iPhoneDevSDK, where their computers were compromised by Java and Apple Says It Was Hit by Malware That Affected a Small Number of Macs

本文轉載自：白蘋果急救室