For the past few days, Jamie Oliver 's website has been offering more than just recipes for appealing dishes, after hackers infected the site with malware that exploits the page's Flash, Silverlight, and Java.
Unlike well-known malware that infects business pages and sites, the chef's website did not fall victim to a malvertising, but was infected with malicious JavaScript that redirects the visitor to the site (antkai [..]com) and then to a landing page hosting malware.
While there is no clear confirmation of the specific attack tool, which is based on the browser used, Malwarebytes' Jerome Segura says the URLs point to Fiesta EK. He did, however, find a piece of malicious JavaScript that was not hidden.
The researcher determined that one of the vulnerabilities exploited by the malware was Flash Player's CVE-2015-0311, for which Adobe released a patch in late January after cybercriminals had been exploiting it for several days using the Angler kit.
Despite the patch being available and despite cybercriminals exploiting this vulnerability, not all users have updated the version of Flash they have on their computers and this may put a large number of them at risk, given that Jamie Oliver's website has monthly traffic of over 10 million visitors.
We advise visitors who do not have the latest updates for Flash, Silverlight, and Java installed to avoid Jamie Oliver's site for the time being, at least until the website is cleaned of malicious code.
