▁vulner ability ▁on ▁Mac ▁OS ▁X . ▁The ▁system ▁was ▁inf ected ▁after ▁the ▁user ▁was ▁redirect ed ▁to ▁a ▁comprom ised ▁bog us ▁site , ▁where ▁JavaScript ▁code ▁caused ▁an ▁app let ▁containing ▁an ▁explo it ▁to ▁load . ▁An ▁executable ▁file ▁was ▁saved ▁on ▁the ▁local ▁machine , ▁which ▁was ▁used ▁to ▁download ▁and ▁run ▁mal icious ▁code ▁from ▁a ▁remote ▁location . ▁The ▁mal ware ▁also ▁switched ▁between ▁various ▁servers ▁for ▁optimized ▁load ▁bal ancing . ▁Each ▁bot ▁was ▁given ▁a ▁unique ▁ID ▁that ▁was ▁sent ▁to ▁the ▁control ▁server . ▁The ▁tro jan , ▁however , ▁would ▁only ▁inf ect ▁the ▁user ▁visit ing ▁the ▁inf ected ▁web ▁page , ▁meaning ▁other ▁users ▁on ▁the ▁computer ▁were ▁not ▁inf ected ▁unless ▁their ▁user ▁accounts ▁had ▁been ▁inf ected ▁separately . ▁ ▁Resol ution ▁Oracle , ▁the ▁company ▁that ▁develop s ▁Java , ▁fixed ▁the ▁vulner ability ▁explo ited ▁to ▁install ▁Flash back ▁on ▁February ▁ 1 4 , ▁ 2 0 1 2 . ▁However , ▁Apple ▁maintain s ▁the ▁Mac ▁OS ▁X ▁version ▁of ▁Java ▁and ▁did ▁not ▁release ▁an ▁update ▁containing ▁the ▁fix ▁until ▁April ▁ 3 , ▁ 2 0 1 2 , ▁after ▁the ▁f law ▁had ▁already ▁been ▁explo ited ▁to ▁install ▁Flash back ▁on ▁ 6 0 0 , 0 0 0 ▁Mac s . ▁On ▁April ▁ 1 2 , ▁ 2 0 1 5 , ▁the ▁company ▁issued ▁a ▁further ▁update ▁to ▁remove ▁the ▁most ▁common ▁Flash back ▁variants . ▁The