Slashdot Mirror
Jamie Oliver's Website Serving Malware
jones_supa writes While routinely checking the latest exploited websites, Malwarebytes came across a strange infection pattern that seemed to start from the official site of British chef Jamie Oliver. Contrary to most web-borne exploits we see lately, this one was not the result of malicious advertising but rather carefully placed malicious JavaScript injection in the site itself. This, in turn, has been used to serve visitors a delicious meal consisting an exploit kit downloading the Dorkbot trojan. Malwarebytes has contacted the administrators immediately upon discovery of this infection.
Sites should be LIABLE for third party ads they serve.
It seems that javascript is a common factor in most malware infection mechanisms. Is there a way to make javascript safe?
...news @ 11...
If you want news from today, you have to come back tomorrow.
Well, on the positive side, at least Slashdot waited until the website had removed the threat before linking to it. Which is a definite improvement over how they handled numerous other stories on similar subjects.
Sometimes people don't actually WANT to get up close and personal with Typhoid Mary, Slashdot.
Meh.
:D
If you're perusing the net without some form of basic protection, you're doing it wrong anyway
( Bare minimum being: NoScript, Ghostery and Adblock, or their equivalents )
( Paranoia level being: The above plus some flavor of Linux in a VM via a Tor relay, VPN service or proxy and a dozen other addons )
Pedorist drug dealer detected. I shall away to alert the local constabulary. Or perhaps the internet police.
That should be familiar to any Oliver fans and hardcore critics alike. For those in neither camp, Barbecoa was Oliver's butchery that was shut down last June after receiving an "A Hazardous" rating from the Food Standards Agency following complaints of food poisoning form several of his restaurants that also received poor FSA ratings for general hygiene. Oliver was also fined £17,000 over this scandal, consisting of just one specimen charge of violating the Food Safety Act, which is pretty fucking disgusting after his ironically calling the US fast food industry out for unsafe kitchen practices. He should have been shut down altogether. Oh, semi-insider info: I have it on very good authority that his restaurants have a higher staff turnover than practically every other sector. They are hellish places to work in. Certainly not worth the wage slavery. The management expect new staff to already know how it all works (in Oliver's eclectic kitchen system!?), training is not only nonexistent it's an inside joke that "training" is a curse word. Most of his staff are school leavers. The only ones over the age of 18 are upper management.
Political debates have me rolling my eyes so much I think I got optical whiplash. I should sue. - Foamy The Squirrel
This doesn't surprise me. I run modsecurity WAF and iptables, yes I know but iptables does the job for now, with custom rules and logging policies and it is amazing to see how many so called legitimate sites have been owned.
I used to contact site admins and participate in exchanges of offending IPs but I gave up a long time ago to run my own countermeasure system.
Boy we went a long way since the beginning with regards to that.
Everything I write is lies, read between the lines.
Quite possibly the only edible thing he's ever served.
I think that he's dancing somewhere right now.
If you post as an AC, don't expect me to spend a mod point on you.
"Once executed, Worm:Win32/Dorkbot.A .. modifies the certain registry entry to execute the malicious file every time Windows is started" ref
Please stop recommending Ghostery, it is made by an advertising firm.
Should have redirected to mcdonalds.com
Jamie Oliver's butcher's forced to close after hygiene inspection
Key bits from the article: "the score for the January 8 inspection is listed as of 1 out of five with the comment: 'major improvement necessary'." and "one of only 19 out of 1,659 food outlets in the City to receive an 'A hazardous' rating".
This sounds pretty damning and pretty embarrassing. That said, there are some odd things. One of the complaints was mold on aging beef, but - depending on what you are doing - mold is part-and-parcel of the process (and the butchery claims that this was the case). Another funny point: the butchery voluntarily closed following the inspection to fix the issues mentioned. It reopened "several hours" later. If the issues could be fixed in a few hours, they were pretty much cosmetic problems.
So what to think? I figure it's 50/50 whether there were real problems, or whether this was a politically motivated inspection. Or maybe the inspector didn't get his free steak.
Enjoy life! This is not a dress rehearsal.
Please stop recommending Ghostery, it is made by an advertising firm
What do you contend that it does wrong?
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
Is there anything wrong with the way it works or is it just the advertising firm that you don't like? I've been using Ghostery for ages and haven't encountered problems with it, so I'm curious.
You're a temporary arrangement of matter sliding towards oblivion in a cold, uncaring universe
After the recent news from Russia about HDs having Trojan from our dear NSA (disclaimer: I'm not from the USA), expect more news about infections from French, English cooks, the Swedish Kennel Club and even those pesky kids from the Mystery Club.
[citation not needed]
The citation isn't needed not because that rant-with-a-personal-slant didn't require citation, but because it's off-topic. I'm not sure how his comment got modded 'Informative' - unless this is not Slashdot, but Buzzfeed, or Us magazine or some other gossip rag.
Without defending whatever nastiness went on in his restaurants, how does that relate to malware being on a website? It's highly unlikely that he personally oversees the restaurants, and even less likely that he personally oversees the website. At best one can fault him for having certain ideas about how to run things, that in turn lead to both restaurateurs and webmasters cutting corners and dropping the ball.
What's next? A report comes out about Forbes being hacked ( http://www.forbes.com/sites/th... ) and we point out how they let an article that was then vastly criticized by its subject ( The Oatmeal - http://theoatmeal.com/blog/tes... ) through as some sort of 'goes to character and general reputation'?
Blocking scripts is deeply problematic. The modern web runs on javascript. Luddites who say things like "block all javascript" are attempting to hide in a simpler time when the web was straight HTML and images.
I for one like my online applications, HTML5 awesomeness and the promise of the new web.
So how would you advise say, my mom, on which scripts to block?
How long does it take to infect the visitors machine? 15 minutes, 30 minutes, or the lengh of a whole program slot of 45 minutes? Is there a timer available, or seasonal theme song?
People still browse websites without updated anti-virus software, Ad Block and No Script for Firefox? I'm shocked.
Britain is the land of the Orwellian Nightmare, and GCHQ makes the NSA look like the pikers they are.
The filthy Jamie Oliver is a front-man propagandist for Tony Blair, and has been instrumental in Blair's 'Academy School' project. Millions of children and their parents face daily, in-your-face, abuse of their personnel choices via 'NANNY STATE' methods directly promoted by Oliver. It is a standard method of PSYCHOLOGICAL GROOMING where a citizen, like a prisoner, purposely has all their decision making rights removed.
Snowden revealed the unthinkable extent of the West's TOTAL SURVEILLANCE activities. The Russians recently proved that every piece of PC hardware is designed to allow unblockable government spying (the GCHQ malware that hides in your HDD only works because Intel ensures all PC bus protocols give ANY computer attached to ANY bus (USB/SATA/IDE/PCI) the ability to master any other device in the PC).
To counter the truth, the filth in power in the USA and UK employ legions of TROLLS to flood forums like this with the old 'tinfoil' crap. They rely on the fact that you BETAS have the memory of a goldfish, and even if you bothered to read revelations from peeps like Snowden, you've forgotten all the proven details a few months later.
Talking about that Demonic War Criminal FILTH, Tony Blair- to show how sick the world really is, that bastard has just got a contract to 'promote' Serbia- the same Serbia where Blair gave the instruction to MURDER an entire civilian TV centre full of civilian workers. But then again, how many of you Bets here ever recall when Blair butchered a TV Centre, because he didn't like what they were broadcasting about his bombing of civilians in Kosovo and Serbia? You are probably too busy dribbling about 'Charlie Hebdo', and those 'horrid free-speech-hating Muslims' to recall how Blair and NATO handles the issue of 'free speech'.
Do you want fries with that?
The sad part is that Blackberry, which preceeds both iOS and Android devices, did the permissions/request model best. Unfortunately they underestimated the power of "apps" and a touchscreen, and for whatever reason the other vendors went with a more lax permissions model (that said, Android is decent when rooted with some 3rd party stuff, but it's hardly an option for the average person).
Adding these sites to your hosts file stops this threat cold:
0.0.0.0 www.jamieoliver.com
0.0.0.0 jamieoliver.com
0.0.0.0 antkai.com
0.0.0.0 rkgizp.lioretasoped.xyz
0.0.0.0 lioretasoped.xyz
0.0.0.0 bestwaytosearch.com
0.0.0.0 xml.2x2click.com
0.0.0.0 2x2click.com
0.0.0.0 jmpdirect01.com
0.0.0.0 www.advconversion.com
0.0.0.0 advconversion.com
0.0.0.0 jmpdirect01.com
0.0.0.0 b.scorecardresearch.com
0.0.0.0 scorecardresearch.com
0.0.0.0 fugupdates112.com
---
SOURCE = https://blog.malwarebytes.org/...
* :)
(Enjoy!)
APK
P.S.=> For the best possible hosts file vs. this threat & others like it, & for adding more speed, security, reliability + more?
APK Hosts File Engine 9.0++ SR-1 32/64-bit -> http://start64.com/index.php?o...
MalwareBytes' hpHosts Admin (MalwareBytes employee) hosts & recommends it -> http://hosts-file.net/?s=Downl... & MalwareBytes = BEST antivirus http://www.av-test.org/en/news...
... apk
Is that with fries or rustic potatoes
Is that with fries or rustic potatoes