Web exploit figures out what OS victim is using, customizes payload

http://cdn.arstechnica.net/wp-content/uploads/2012/07/jar_code.png

Security researchers have found a live Web exploit that detects if the target is running Windows, Mac OS X, or Linux and drops a different trojan for each platform.

The attack was spotted by researchers from antivirus provider F-Secure on a Columbian transport website, presumably after third-party attackers compromised it. The unidentified site then displayed a signed Java applet that checked if the user’s computer is running Windows, Mac OS X, or Linux. Based on the outcome, the attack then downloads the appropriate files for each platform.

Read more: Web exploit figures out what OS victim is using, customizes payload

Story added 11. July 2012, content source with full text you can find at link above.