Wednesday 15 April 2015

Facebook Hacker No Download

One of the issues is a reflected file download (RFD) flaw that could be exploited by bad actors to insert a malware into the victim's machine that appears like it is coming from a legitimate Facebook domain. Sopas explained that he has discovered two distinct reflected file download vulnerabilities in Facebook that are still unpatched. In order to exploit the flaw, the attacker needs the interaction of the victims. The first one was present on Graph Facebook API and could be replicated under Internet Explorer 9 just by sending a link.