The site of famous chef Jamie Oliver is once again infecting visitors with malware, but this time there is a digital signature on the malicious script.
In February, security researchers at Malwarebytes discovered that visitors to the popular recipe and cooking advice site were exposed to a drive-by attackwhile browsing through various recipes.
Although the problem was solved at the time, it seems that the website was not completely freed and some fraudsters either managed to strike with a new attack or maintained a backdoor to exploit it.
The hackers likely exploited a security vulnerability in the server or CMS, in this case Concrete5, which is used to manage the website. However, it is possible that various plug-ins created a security problem for the site.
Jerome Segura of Malwarebytes has found that the site is once again compromised, and that the malicious code has the same structure as in the previous attack. One of the many similarities is that the redirection is again to the Fiesta exploit kit.
The malware is not detected by most of antiviruses , with Malwarebytes and ESET NOD32 being the only ones that managed to find it, at least for now.
By keeping all website software up to date and conducting systematic security checks, administrators can ensure that their websites remain safe from malicious code that could put visitors at risk.
On the other hand, users must install security software on their computers and make all updates provided by the respective companies.
