In plain words
Imagine you have a house with a lock on the door, but someone found a way to make a copy of your key without you knowing. This is kind of like what malware does, it gets into your computer without you realizing it and can cause problems. In this case, the malware is called Mokes and it was used in an attack on Mac users who use Firefox.
What's broken
The malware is a type of backdoor¹, which means it allows the attacker to access the computer remotely, like having a secret door into the house. The Mokes malware has been seen before, but this is a new variant², which means it has some changes that make it different from the old version. It can persist³ on the computer, meaning it can stay there even after the computer is restarted, and it has capabilities⁴ like allowing the attacker to upload and download files.
How it actually works
The attack works by exploiting⁵ a vulnerability⁶ in Firefox, which is like finding a weak point in the lock on the door. The attacker can use this weak point to get the malware onto the computer, and then the malware can start doing its job, like opening the secret door for the attacker. The malware uses a technique⁷ called persistence to stay on the computer, which is like hiding a spare key outside the house so the attacker can get back in later.
Proof of concept
There is a proof of concept⁸, which is like a demonstration that the malware really works, but it's not clear from the source how mature it is. A proof of concept proves that the flaw is real and can be reached, not just theoretical, and it raises the urgency because it shows that the attack is possible.
Is it real
It's not clear from the source if the malware is being actively exploited⁹ in the wild, or if there are any limiting factors like a feature being off by default. To protect yourself, you should keep your software up to date and be careful when clicking on links or downloading files.
What to do
To fix the problem, you should update your Firefox browser to the latest version, which should patch¹⁰ the vulnerability. You can also use antivirus software to scan your computer for malware and remove it if it's found.
Terms
- ¹ backdoor
- , a type of malware that allows an attacker to access a computer remotely
- ² variant
- , a new version of a piece of malware
- ³ persist
- , the ability of malware to stay on a computer even after it's restarted
- ⁴ capabilities
- , the things a piece of malware can do
- ⁵ exploiting
- , taking advantage of a weakness in a computer system
- ⁶ vulnerability
- , a weakness in a computer system that can be exploited
- ⁷ technique
- , a way of doing something, in this case, a way for malware to stay on a computer
- ⁸ proof of concept
- , a demonstration that a piece of malware or a vulnerability is real
- ⁹ actively exploited
- , being used in real-world attacks