Watering hole attacks

wes allen

Hey, here is a bit more on the recent Facebook/twitter/Apple compromise via java and a tech website forum.

Dev site behind Apple, Facebook hacks didn’t know it was booby-trapped | Ars Technica

I would think techexams would be a fairly high value target as well. I have my java disabled and use noscript as well to help lower the risk of just general web browsing.

the_Grinch

Not entirely new, I remember a few years back hackers had gotten into the NFL's website and were serving up a malicious javascript file to download malware. The big thing was this was done before the Superbowl, so lots of people hitting the site and being infected.