<p><div class="KonaFilter image-container display-table float_right"><div><div class="image"><p class="source"><span><a href="https://www.youtube.com/watch?v=EaJj_Ymuj2Y">YouTube/RCManiaDotCom</a></span></p><p class="caption">A Maisto monster truck</p></div><p></p></div></div>The website of Japanese toy-maker Maisto has been found to be spreading malicious software that encrypts a user's files and holds them to ransom, <a href="http://arstechnica.co.uk/security/2016/04/maisto-toymaker-website-pushes-ransomware-to-users/">Ars Technica reports</a>.</p><p>Maisto is the manufacturer of model vehicles which are sold around the world. But researchers from security company Malwarebytes found that its website was infected with ransomware, a type of malicious software that is spread between computers, infects hard drives, and then forces people to pay to unlock their files.</p><p><strong>Maisto's website is currently unavailable:</strong></p><p><div class="KonaFilter image-container display-table"><div><div class="image on-image"><p class="source"><span>Maisto</span></p></div><p></p></div></div></p><p>Ars Technica says that it looks like someone managed to get into Maisto's website using an outdated version of its content management system.</p><p>This isn't the first time that ransomware has been spread online. A Mac torrent client named Transmission <a href="http://researchcenter.paloaltonetworks.com/2016/03/new-os-x-ransomware-keranger-infected-transmission-bittorrent-client-installer/">was found to be spreading ransomware </a>through its installer in March.</p>    <div class="margin-top">        <h3>NOW WATCH: <a href="http://www.businessinsider.com/uber-drivers-will-make-more-waiting-tech-customer-cancellation-fee-2016-4">Uber is making customers pay for having drivers wait</a></h3>        <div>            <div>        <div class="ooyala-video-player" data-video-autoplay="false" data-video-id="k1eDU2MzE6Ns4-GP6FMUZ5hWF0ZHRQMb" data-player-variable="ooyalapopvideo" id="ooyalaplayer_popvideo" style="width:1280px;height:720px"></div>        </div>        </div>            </div>

The website of a toy company has been spreading malware that holds files to ransom

<p><div class="KonaFilter image-container display-table float_right"><div><div class="image on-image"><p class="source"><span>Wikimedia Commons</span></p><p class="caption">Researchers have spotted a wave of attacks targeting Macbook users.</p></div><p></p></div></div>Hackers are exploiting a critical vulnerability in Apple's OS X operating system to install malware on Macbooks.</p><p><a href="https://blog.malwarebytes.org/mac/2015/08/dyld_print_to_file-exploit-found-in-the-wild/" title="DYLD_PRINT_TO_FILE exploit found in the wild">Malwarebytes Apple security expert Thomas Reed reported uncovering the attacks</a> in a threat advisory.</p><p><a href="https://www.sektioneins.de/en/blog/15-07-07-dyld_print_to_file_lpe.html" title="OS X 10.10 DYLD_PRINT_TO_FILE Local Privilege Escalation Vulnerability">The vulnerability was uncovered by security researcher Stefan Esser at the end of July.</a> It relates to the way Apple OS X version 10.10 logs software errors and can be used by hackers to forcibly install software on Macbooks.</p><p>Reed said the current attacks targeting the flaw install a variety of malicious programs. These include the VSearch and Genio adwares and MacKeeper junkware.</p><p>Adware is a piece of software used to push advertisements to users. The VSearch and Genio adwares are aggressive forms of the software that push adverts to the user via a series of pop-up web browser windows.</p><p><a href="https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/OSX~VSearch-A.aspx" title="Sophos malware database">VSearch and Genio are listed by most security tools as either potentially unwanted programs or outright malware</a> as they regularly ignore the user's privacy settings and have spread malicious adverts in the past.</p><p>Junkware is useless software that doesn't directly damage a computer, but doesn't offer any clear benefits to its user.</p><p>MacKeeper is listed by its maker as a Mac OS X performance enhancing software. Mac OS X users began referring to it as junkware after <a href="https://discussions.apple.com/thread/5437350">Apple forum users suggested that its services didn't actually work</a>.</p><p>Malwarebytes' Reed said the attacks are troubling as there is currently no fix for the vulnerability being targeted.</p><p>"This is obviously very bad news. Apple has evidently known about this issue for a while now - not due to Esser, but thanks to a responsible researcher going by the Twitter handle @beist, who had alerted Apple some time before Esser discovered the bug," he said.</p><p>"Unfortunately, Apple has not yet fixed this problem, and now it is beginning to bear fruit. Worse, there is no good way to protect yourself."</p><p>Business Insider has reached out to Apple for comment when Mac OS X users can expect a fix.</p><h2>One of two problems</h2><p>The Mac OS X attacks come just after researchers claimed to have developed <a href="https://trmm.net/Thunderstrike_2" title="Thunderstrike 2">a "Thunderstrike 2" malware capable of infecting Macbooks.</a></p><p>Researchers Trammel Hudson and Xeno Kovah reported developing the malware at the Blackhat tradeshow in Las Vegas.</p><p>Thunderstrike is a proof-of-concept malware, intended for research purposes that is not active in the wild. It can reportedly infect Macbook computers using infected Macbook peripherals.</p><p>Business Insider reached out to Apple for comment on the Thunderstrike 2 malware.</p>    <div class="margin-top">        <h3>NOW WATCH: <a href="http://www.businessinsider.com/clear-out-iphone-storage-space-2015-6">How to clear out a ton of space on your iPhone superfast</a></h3>        <div>            <div>        <div class="ooyala-video-player" data-video-autoplay="false" data-video-id="5qcmxndToofREk2JFghn1wjMFTZOXP_E" data-player-variable="ooyalapopvideo" id="ooyalaplayer_popvideo" style="width:1280px;height:720px"></div>        </div>        </div>            </div>

Hackers are installing malware on Macbooks - and there's nothing you can do to stop them

<p><div class="KonaFilter image-container display-table"><div><div class="image"></div></div></div></p><ul class="summary-list"><li>Financial companies do a lot to keep your money and identity secure, but you are an important part of your own <a href="https://www.businessinsider.com/how-to-secure-accounts-protect-information-online-hackers-2019-10">digital security</a>.</li><li>Using strong, unique passwords is vital to keeping hackers and cybercriminals at bay.</li><li>Human error is one of the most common causes of a security breach. Learning what to look out for is important for your online security.</li><li><a href="https://www.businessinsider.com/yourmoney?utm_source=bullet">Read more personal finance coverage</a>.</li></ul><p>While many people think that the safest way to manage your money is with paper, these days the opposite is true. If you use good digital security and cyber hygiene practices, your money and information are safest with a digital-first approach.</p><p>Follow these good habits when managing your finances with your phone or computer to <a href="https://www.businessinsider.com/7-emerging-technologies-that-cybersecurity-experts-are-worried-about-2019-10">keep the digital bad guys at bay</a>.</p><h2>1. Always use secure and unique passwords</h2><p>Your bank, investment, credit card, and other financial accounts come from companies that use cutting-edge digital security technology. From a secure connection to your browser using Secure Sockets Layer (SSL) to strong security practices in their data centers, bank-level security does a good job at keeping hackers out.</p><p>However, it doesn't do much good at all if your password is public information. Many companies that don't deal with your money get hacked every year. If you use a lot of different online services, odds are your account information has leaked at least a few times over the years. If you use the same password at every website, that means cybercriminals can access all of your accounts.</p><p>Use a <a href="https://www.businessinsider.com/how-to-use-password-manager-store-protect-yourself-hackers-lastpass-1password-dashlane-2017-2">secure password manager, like LastPass, Dashlane, or 1Password,</a> to create a unique, random, strong password for every single website and app. I've used LastPass since 2010. Despite falling victim to numerous hacks, the damage never spread to other accounts thanks to unique passwords everywhere.</p><h2>2. Keep your computer and phone updated</h2><p>When you see a notification from your phone or computer that there's an update available, you <a href="https://www.businessinsider.com/how-to-make-phone-safe-security-tips-2019-9">should almost always update right away</a>. Updates might bring new features or change your battery life, but they also usually come with a swath of bug fixes and security improvements.</p><p>That goes for apps and programs you have installed on your devices as well. It takes just one bad app on your phone for a criminal to view your screen, log your passwords, and get into your accounts.</p><p>Silent viruses and worms on computers do the same on both Windows and Mac. One kind of <a href="https://www.ubs.com/microsites/wma/insights/en/life-events/2018/how-to-avoid-ransomware.html">malware called ransomware</a> can lock your precious data unless you pay a ransom.</p><p>To add an additional layer of security, set updates to automatic where available and install every new security update right away.</p><h2>3. Use a virus scanner and firewall program</h2><p>Most people know you need to use some kind of virus protection, but many people are not nearly protected enough. Security experts suggest that <a href="https://www.businessinsider.com/fighting-ransomware-with-antivirus-2016-1">big-brand virus scanners and firewalls</a>, when kept up-to-date, should keep your devices safe from most threats.</p><p>Windows users have great built-in programs to handle virus scanning and firewall needs without paying for an extra third-party tool, though many users feel safer with a program like McAfee, Norton, Bitdefender, or Kaspersky running in the background.</p><p>Mac users sometimes think they don't need virus protection, but they absolutely do. Avast, Sophos, Norton, and Malwarebytes are popular antivirus brands for Mac.</p><p>It's a good idea to add virus and malware protection on your Android or iOS smartphones and tablets as well. If you use it to log into your bank or email, it should have virus protection.</p><h2>4. Use a VPN on public WiFi</h2><p>If you spend time at coffee shops, hotels, airports, or anywhere else with public WiFi, you have an extra security need to take care of. Public networks may put you at risk for digital snooping through a Man-in-the-Middle attack or similar hack. But you can <a href="https://www.businessinsider.com/computer-safety-security-tech-accessories-vpn-2018-6">keep those prying eyes away</a> with a quality virtual private network (VPN) on your device.</p><p>A VPN creates a secure internet tunnel between your computer or phone and a remote server. All of your internet traffic between that server and your device is encrypted. Not even the internet service provider can read the contents of what's going through with a VPN in place. There are many reputable VPN providers with varying features and costs to choose from.</p><h2>5. Beware the bad email link</h2><p>Because virus scanners and anti-malware apps are so good, cybercriminals look to one of the biggest weaknesses a computer has to break through: its user. Humans clicking on bad links in phishing and spam emails is one of the top ways hackers gain access to a computer.</p><p>Once you click on a bad link, a website may be able to install malware without your knowledge. All of a sudden and without warning, your passwords and account information could fall into the wrong hands. If you don't know the person on the other end of the email or it looks at all suspicious, don't click the link.</p><h2>You are the first line of defense</h2><p>Your bank works hard every day to keep your accounts safe, but if you let your username and password slip into the wrong hands, there's only so much that can be done to keep them out. If you follow good practices, use unique passwords, and avoid bad emails, you should be in the best shape to keep yourself digitally secure.</p><ul class="read-more-links"><li>More <a href="https://www.businessinsider.com/category/personal-finance-insider">personal finance</a> coverage</li><li><a href="https://www.businessinsider.com/best-airline-credit-card-comparison-delta-united-american">What's the best airline credit card?</a></li><li><a href="https://www.businessinsider.com//best-cash-back-credit-cards">The best cash back credit cards</a></li><li><a href="https://www.businessinsider.com/are-cds-a-good-investment">Are CDs a good investment?</a></li><li><a href="https://www.businessinsider.com/when-to-save-money-in-high-yield-savings">When to save money in high-yield savings</a></li><li><a href="https://www.businessinsider.com/best-rewards-credit-cards">Best rewards credit cards</a></li></ul>

I'm a former banker, and I swear by 5 strategies to keep my money safe online

<p><div class="KonaFilter image-container display-table float_right"><div><div class="image"><p class="source"><span><a href="https://www.flickr.com/photos/vfsdigitaldesign/8203794182/">Flickr / VFS Digital Design</a></span></p></div><p></p></div></div>Ransomware, a type of malware that encrypts all the data on your computer until you pay the attackers a ransom (often in bitcoins), has been <a href="http://www.businessinsider.com/ransomware-as-a-service-is-the-next-big-cyber-crime-2015-12">a big problem for Windows users for years.</a></p><p>And now the first successful ransomware attack on Mac users occurred this weekend, using malware designed to lock files on a targeted computer three days after infection, <a href="http://www.reuters.com/article/us-apple-ransomware-idUSKCN0W80VX" target="_blank">reports Reuters' Jim Finkle</a>. Targeted users could start seeing their files locked on Monday. </p><p><span>Finkle</span> was told about the attack by security researchers at Palo Alto Networks.</p><p>While there have been previous reports of Mac users attacked by ransomware, <a href="https://blog.malwarebytes.org/exploits-2/2013/07/qa-about-the-latest-html-ransomware-affecting-mac-os-x-users/">such as an attack back in 2013</a>; in that case, the attack was more or less faked.</p><p>Attackers were able to embed a little bit of code in the browser that made it look like the Mac (or Windows) machine was locked and encrypted when only the browser was affected, <a href="https://blog.malwarebytes.org/exploits-2/2013/07/qa-about-the-latest-html-ransomware-affecting-mac-os-x-users/">reported security researchers at Malwarebytes</a>.</p><p>But it seemed only a matter of time before Macs would get their own ransomware. Security researchers have been writing more and more proof-of-concept Mac ransomware and<a href="http://www.pcworld.com/article/3003987/business-security/ransomware-for-mac-is-nothing-to-worry-about-for-now.html"> a few successful attempts were shared by at least two different researchers last fall</a>. The idea of proving and sharing such code is to allow Apple and others to fix the holes that would let real hackers get in. </p><p>The good news is that Apple may have developed a fix to stop this particular ransomware attack. This malware appears to have snuck into an app called Transmission, a way for people to share movies and other content via sharing tech called BitTorrent. Apple has come up with a way to block Macs from installing the infected version of this app.</p><p>The Transmission website carries a warning telling people to upgrade to a new version of the app immediately, and offers instructions to check if your Mac was infected.</p><p>The bad news is that, given the rise in popularity of Macs, particularly in businesses and other targets with deep pockets, this also might be just the beginning of ransomware in the wild for Macs, and comes into the your computer in other ways.</p><p><div class="KonaFilter image-container display-table"><div><div class="image"><p class="source"><span>Transmission</span></p><p class="caption">The Transmission website's malware warning.</p></div><p></p></div></div></p>    <div class="margin-top">        <h3>NOW WATCH: <a href="http://www.businessinsider.com/online-shopping-security-risks-internet-malware-adam-levin-2015-11">The biggest security mistakes people make when buying things online</a></h3>        <div>            <div>        <div class="ooyala-video-player" data-video-autoplay="false" data-video-id="JkYm0zeTqONkxksdDZUvBQ96QmWamtrp" data-player-variable="ooyalapopvideo" id="ooyalaplayer_popvideo" style="width:1280px;height:720px"></div>        </div>        </div>            </div>

For the first time, Mac users have to worry about malware that locks their computer and demands a ransom

<p><span><div class="image-container float_right" style="width:400px"><div class="image"></div><p class="source"><a href="http://statigr.am/p/314441797147912357_228760601">Instagram/kashsujan</a></p></div>Nate Andersen at Ars Technica published what I call a "rabbit hole" piece Sunday night detailing the <a href="http://arstechnica.com/tech-policy/2013/03/rat-breeders-meet-the-men-who-spy-on-women-through-their-webcams/3/">secret Internet underbelly</a> of a group of programmers called RATters.</span></p>
<p>It's a <a href="http://www.urbandictionary.com/define.php?term=rabbit%20hole"><strong>rabbit hole</strong></a> because you can't ever come back once you've <a href="http://arstechnica.com/tech-policy/2013/03/rat-breeders-meet-the-men-who-spy-on-women-through-their-webcams/">read a piece</a> like this. It's a Matrix-style <a href="http://en.wikipedia.org/wiki/Red_pill_and_blue_pill">Red Pill</a>.</p>
<p>Or maybe, more accurately: A RAT hole.</p>
<p>A RAT is a <a href="http://en.wikipedia.org/wiki/Remote_administration_software">Remote Administration Tool</a> that <a href="http://www.urbandictionary.com/define.php?term=IT%20GUY">IT guys</a> use to look inside computers.</p>
<p><span>Basically it's software that tech sections in corporations sometimes use to get remote control of a desktop for troubleshooting purposes. RATers have co-opted this software to hijack women's systems without their knowledge. RATers refer to these women as slaves.<br /></span></p>
<p>Slipping past the three pages of pervertedness (which again, <a href="http://arstechnica.com/tech-policy/2013/03/rat-breeders-meet-the-men-who-spy-on-women-through-their-webcams/3/">I recommend reading at length</a>), one gets to a truly troubling aspect of hacking (or any sort of innovation for that matter): <a href="http://www.econlib.org/library/Enc/UnintendedConsequences.html">the law of unintended consequences</a>.</p>
<p>Perverts have obviously repurposed this software — meant originally to fix computers — to watch unsuspecting people. Presumably, there's nothing stopping embattled dictators, say during the Arab spring, from doing the same thing in order to surveil leaders of rebel groups.</p>
<p>This is exactly what <a href="http://www.malwarebytes.org/lp/malware_lp/?gclid=CN6lnN-597UCFYbc4AodrUgAlw">Malwarebytes</a>, a computer security company, found after analyzing all the things that popular RAT DarkComet was capable of. That analysis also referred to the fact that the Syrian and Egyptian governments used <keyword id="104664" type="ORGANIZATION" weightage="60" keywordseo="rats">RATs</keyword> to battle rebels.</p>
<p><span>From Ars Technica:</span></p>
<p style="padding-left: 30px;">The conclusion drawn by the <strong><a href="http://blog.malwarebytes.org/intelligence/2012/06/blackshades-in-syria/">researchers at Malwarebytes</a></strong> was that RAT creators had <strong>unwittingly become low-cost arms dealers to repressive regimes</strong> that couldn't afford to develop such tools themselves.</p>
<p>So a piece of software developed in an open source environment <a href="https://www.eff.org/deeplinks/2012/06/darkshades-rat-and-syrian-malware">was picked up</a> by oppressive regimes <a href="http://www.informationweek.com/security/vulnerabilities/finfisher-mobile-spyware-tracking-politi/240006620">to spy on </a>unwitting rebels.</p>
<p>Andersen notes at the end of his piece that the results of these revelations, as well as the use of his technology by RATs, led prominent RAT program author Jean-Pierre Lesueur to "shut down DarkComet <a href="Jean-Pierre%20Lesueur%20shut%20down%20DarkComet%20with%20a%20message%20blaming%20his%20users.">with a message</a> blaming his users."</p>
<p>As an aside, <keyword id="11094" type="UNKNOWN" weightage="60" keywordseo="Hackers">hackers</keyword> recommend keeping Javascript and Flash updated on computers to avoid becoming a RATter's slave.</p>

Internet Perverts Called 'RATters' Are Hacking Into Women's Webcams

<p><div class="KonaFilter image-container display-table float_right"><div><div class="image on-image"></div><p></p></div></div>Google's DoubleClick ad server for publishers is down, which could be costing some of the world's biggest websites millions of dollars collectively in missed <keyword id="35666" type="COMPANY" weightage="100" keywordseo="advertising">advertising</keyword> revenue as Google scrambles to solve the problem.</p>
<p>The global issue is also bringing some websites to a standstill as ads fail to load on web pages.</p>
<p>Right now, much of the web exists only in a rare, ad-free condition. Don't expect it to last.</p>
<p class="p1">Usually when accessing Forbes' site, for example, users are famously served with a full page ad before entering the main homepage. (Forbes competes with Business Insider, obviously.) However, currently, that ad slot is blank and text simply says "waiting for ad.doubleclick.com," which is preventing the page from loading as quickly as it should:</p>
<p class="p1"><div class="KonaFilter image-container display-table"><div><div class="image on-image"></div><p></p></div></div></p>
<p class="p1">Other sites affected include The Wall Street Journal, BBC.com, Mashable and Business Insider. It appears the problem first arose at around 9 a.m. EST.</p>
<p class="p1">People have taken to Twitter to complain about the issue:</p>
<p class="p1"><div class="KonaFilter image-container display-table"><div><div class="image on-image"></div><p></p></div></div></p>
<p class="p1">The DoubleClick for Publishers Help forum is also flooded with questions about the outage.</p>
<p class="p1"><div class="KonaFilter image-container display-table"><div><div class="image on-image"></div><p></p></div></div></p>
<p class="p1">Business Insider has contacted Google for comment. This article will be updated when that has been received.</p>
<p class="p1">Google's DoubleClick for Publishers, DoubleClick for Advertisers and Dart Sales Manager came to a halt last back in March 2013, when the services were down for a number of hours, <a href="http://www.mediapost.com/publications/article/196861/doubleclick-tools-down-for-most-of-thursday-ad-se.html?edition=">according to a report from MediaPost.</a></p>
<p class="p1"><a href="https://blog.malwarebytes.org/malvertising-2/2014/09/large-malvertising-campaign-under-way-involving-doubleclick-and-zedo/">Google DoubleClick's latest headache comes just weeks after researchers at Malwarebytes found the server was exposing millions of users to malware. </a>Google has now resolved this particular issue.</p>
<p class="p1"><a href="http://www.businessinsider.com/doubleclick-for-publishers-down-2014-11">This story is developing, please click here to refresh the page.</a></p>

Google's DoubleClick Ad Server Is Down, Costing Publishers Thousands Of Dollars Lost Revenue

<p><div class="KonaFilter image-container display-table float_right"><div><div class="image on-image"><p class="source"><span><a href="http://iconosquare.com/p/926993509403044883_173926002">Instagram/christinagcheng</a></span></p><p class="caption">Nike has a new store in Seattle with features including gait analysis.</p></div><p></p></div></div>Good morning. Here's everything you need to know in the world of <keyword id="35666" type="COMPANY" weightage="100" keywordseo="advertising">advertising</keyword> today.</p><p><strong>1. <a href="http://www.businessinsider.com/instagram-switches-on-ads-api-2015-8">Instagram has switched on its advertising API.</a></strong> It means any advertiser can now buy Instagram ads and plan and monitor activity on the app using a self-service third-party platform like Salesforce Marketing Cloud, or Hootsuite.</p><p><strong>2. <a href="http://www.businessinsider.com/r-samsung-glamor-days-over-as-it-fights-to-save-mobile-market-share-2015-8">It looks like the writing is on the wall for Samsung.</a></strong> It is being forced to slash prices and accept lower margins at its mobile division in order to see off competition from rivals in the mid-to-low end of the market.</p><p><strong>3. <a href="http://www.businessinsider.com/freebooting-video-on-facebook-2015-8">Here's a look at how big a problem "freebooting" is for Facebook.</a></strong> YouTube star and the founder of VidCon Hank Green has complained about copyright violations on the social network, and also objected to the way Facebook counts three seconds of autoplay video as a "view"</p><p><strong>4. <a href="http://www.businessinsider.com/microsoft-10q-top-priorities-2015-8">Microsoft has laid out its top three priorities.</a></strong> None of them mention Windows.</p><p><strong>5. <a href="http://www.businessinsider.com/yahoos-advertising-network-is-being-targeted-by-hackers-malwarebytes-says-2015-8">Hackers have been using ads on Yahoo's biggest websites to try to infect millions of people's computers with malware, according to security researchers at Malwarebytes.</a></strong> Yahoo says it took action to block the bad advertiser from its network as soon as the company learned of the issue.</p><p><strong>6. <a href="http://www.businessinsider.com/twitter-share-price-august-3-2015-8">Twitter's shares closed at a record low on Monday.</a></strong> Its stock fell 5.6% to close at $29.25, the lowest since the company's public debut.</p><p><strong>7. <a href="http://www.businessinsider.com/reddit-pageview-record-2015-8">All the recent drama at Reddit hasn't hurt its traffic.</a></strong> July was a record month for the site.</p><p><strong>8. <a href="http://adexchanger.com/digital-tv/cord-cutting-is-not-a-global-phenomenon-says-german-tv-giant/">Cord cutting is not a global phenomenon.</a></strong> That's according to Christof Wahl, the managing director of German TV giant ProSiebenSat.1's digital arm, who spoke to AdExchanger.</p><p><strong>9. <a href="http://www.businessinsider.com/redesigned-seattle-nike-store-offers-gait-analysis-2015-8">Nike just revealed its fascinating store of the future.</a></strong> The new store has a number of cool features, including an art installation signed by Seahawks players, gait analysis technology, and an intricate Michael Jordan display.</p><p><strong>10. <a href="http://www.businessinsider.com/how-17-famous-companies-got-their-names-2015-7">Here's how 17 famous companies got their quirky names.</a></strong> From Ikea to Lego, Pepsi to Starbucks, and Oracle to Spotify.</p>    <div class="margin-top">        <h3>NOW WATCH: <a href="http://www.businessinsider.com/honest-company-sunscreen-complaints-jessica-alba-2015-8">Parents are complaining that Jessica Alba's Honest Company sunscreen doesn't work</a></h3>        <div>            <div>        <div class="ooyala-video-player" data-video-autoplay="false" data-video-id="V0ZnRudjoITksTE5u8ADsdYBSJ5fiEOT" data-player-variable="ooyalapopvideo" id="ooyalaplayer_popvideo" style="width:1280px;height:720px"></div>        </div>        </div>            </div>

The 10 things in advertising you need to know today

<p><div class="KonaFilter image-container display-table float_right"><div><div class="image"></div><p></p></div></div>The <a href="http://www.jamieoliver.com/">website of famed celebrity chef Jamie Oliver </a>has been hacked for a second time in as many months. <a href="https://www.fox-it.com/en/about-us/">Internet security company Fox It </a>says researchers uncovered "malicious code inside the main page" and revealed the cyber attack to Business Insider on Friday.</p><p>Fox It says that the website was targeted on March 5. A spokesperson explained that finding the problem "took some doing" because the website uses a lot of Javascript (website code), so there's a great deal of information to sift through. </p><p>"We first saw JamieOliver.com redirecting to the exploit kit as early as Thursday March 5, which means that the website has been redirecting for at least eight days," Fox It said. An exploit kit is a pre-built piece(s) of software that meddles with the otherwise friendly code that only wants to help tell the public about <a href="http://www.jamieoliver.com/#3TGLvVuqurSKlGSf.97">pesto and how to make hollandaise sauce.</a></p><p><strong>Fox It sent Business Insider this screenshot of the offending malware:</strong></p><p><div class="KonaFilter image-container display-table"><div><div class="image on-image"></div><p></p></div></div><span style="line-height: 1.5em;"><br /></span></p><p>A spokesperson for jamieoliver.com said in an email that the team believes the website "was the target of another attack," but the problem has been resolved. "We have taken measures to clear the offending code and the site is now safe to visit. We are now running a forensic audit to find out more information," the spokesperson said.</p><p>The website is hugely popular. It gets around 10 million visitors a month.</p><p><strong>This is what Jamie Oliver's website looks like from the outside... </strong></p><p><div class="KonaFilter image-container display-table"><div><div class="image on-image"></div><p></p></div></div><span style="line-height: 1.5em;"><br /></span></p><p><a href="http://uk.businessinsider.com/jamie-oliver-website-hacked">In February, jamieoliver.com was "compromised" by malware</a> that could have potentially damaged the machines of the website's users. <a href="https://blog.malwarebytes.org/exploits-2/2015/02/celebrity-chef-jamie-olivers-website-hacked-redirects-to-exploit-kit/">The first hack was found by a blog called malwarebytes.</a></p><p>The team at jamieoliver.com told BI at the time that the issue was "low-level" and the problem was dealt with quickly. Maywarebytes also confirmed the site was cleared of any harmful material and cleaned up very quickly.</p><p>This time, Fox It suggests the situation could have been worse. "This returning issue typically indicates the website is compromised in other ways and potential 'bad guys' have unprecedented access."<span style="line-height: 1.5em;"><br /></span></p>    <div class="margin-top">        <h3>NOW WATCH: <a href="http://www.businessinsider.com/food-myths-wrong-health-msg-yogurt-2014-12">6 Food Myths That Are Completely Wrong</a></h3>        <div>            <div>        <div class="ooyala-video-player" data-video-autoplay="false" data-video-id="tnbXk4cjr6Db4SyLXtP_iI8K6chw0IKn" data-player-variable="ooyalapopvideo" id="ooyalaplayer_popvideo" style="width:1280px;height:720px"></div>        </div>        </div>            </div>

Jamie Oliver's website was hacked for a second time

<p><div class="KonaFilter image-container"><div class="image on-image"></div><p></p></div></p><p>A critical security hole recently found in Adobe Flash, known as a zero-day vulnerability because it was previously undiscovered, is being exploited by cyber criminals after <a href="https://helpx.adobe.com/security/products/flash-player/apsb15-14.html" target="_blank" title="Security updates available for Adobe Flash Player">Adobe released a rush fix</a>.</p><p><a href="https://www.fireeye.com/blog/threat-research/2015/06/operation-clandestine-wolf-adobe-flash-zero-day.html" target="_blank" title="Operation Clandestine Wolf - Adobe Flash Zero-Day in APT3 Phishing Campaign">The Adobe Flash plugin vulnerability</a>, known to have been used by the infamous "Clandestine Wolf" hacker group, was originally spotted by researchers at security firm FireEye, who detected a number of phishing messages targeting businesses in the aerospace, defence, construction, technology, and telecoms industries using it last week.</p><p>The attacks leveraged the Flash flaw to steal data from the victim machines and move laterally through company networks.</p><p>While serious, the flaw's scope was originally viewed to be quite limited as it was only one being used by the group "Clandestine Wolf" and <a href="https://helpx.adobe.com/security/products/flash-player/apsb15-14.html" target="_blank" title="Security updates available for Adobe Flash Player">Adobe released a fix</a>.</p><p>Clandestine Wolf, who in the past has been called APT3 and Clandestine Fox, is a hacker group that has targeted numerous government departments and businesses across the world over the last year.</p><p>Since then, the Flash flaw's potential for harm has grown as independent security researcher "MalwareDontNeedCoffee" has seen <a href="http://malware.dontneedcoffee.com/2015/06/cve-2015-3113-flash-up-to-1800160-and.html" target="_blank" title="CVE-2015-3113 (Flash up to 18.0.0.160) and Exploit Kits">various groups begin targeting it using the Magnitude exploit kit</a>.</p><p>"Patched four days ago with Flash 18.0.0.194, the CVE-2015-3113 has been spotted as a zero-day by FireEye, exploited in limited targeted attacks. It's now making its path to Exploit Kits," he wrote in a threat advisory.</p><p>Exploit kits are attack tools commonly traded on underground online black markets that let criminals, who may not have strong computer skills, mount cyber attacks.</p><p>The rapid addition of the Adobe flaw to exploit kits has caused concern within the security community, with many feeling most businesses will not have had time to install the Adobe fix.</p><p>Jérôme Segura, Malwarebytes' senior security researcher, <a href="https://blog.malwarebytes.org/exploits-2/2015/06/recent-flash-player-0-day-exploit-goes-mainstream/">said in a blog post that he expects to see more exploit kits add functionality for the flaw</a> and equally serious Flash bugs to appear in the very near future.</p><p>"We can expect other exploit kits to follow suit very soon and start delivering this latest vulnerability," Segura wrote.</p><p>"Without a doubt, this is the year of Flash zero-days and many are already suggesting to take drastic measures such as completely uninstalling the plugin."</p><p>Flash is commonly viewed as one of the most insecure pieces of software by security professionals and has been targeted by numerous state and criminal hacking groups.</p><p><a href="https://www.fireeye.com/blog/threat-research/2015/04/probable_apt28_useo.html" target="_blank" title="Operation RussianDoll: Adobe &amp; Windows Zero-Day Exploits Likely Leveraged by Russia's APT28 in Highly-Targeted Attack">FireEye uncovered another targeted attack campaign, codenamed "RussianDoll"</a> using Adobe Flash vulnerabilities in a series of targeted attacks in April.</p><p>Prior to it, <a href="http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-new-adobe-flash-zero-day-exploit-used-in-malvertisements/" title="Trend Micro Discovers New Adobe Flash Zero-Day Exploit Used in Malvertisements">Adobe was forced to patch three zero-day vulnerabilities in January and February</a>, one of which was similarly targeted by the Angler exploit kit.</p>    <div class="margin-top">        <h3>NOW WATCH: <a href="http://www.businessinsider.com/scientifically-ways-women-attractive-2015-5">6 scientifically proven features men find attractive in women</a></h3>        <div>            <div>        <div class="ooyala-video-player" data-video-autoplay="false" data-video-id="tiMGo5cTpwCabxNRPKR9Te43E3zYrTMd" data-player-variable="ooyalapopvideo" id="ooyalaplayer_popvideo" style="width:1280px;height:720px"></div>        </div>        </div>            </div>

A critical flaw in Adobe's Flash player has appeared on the cyber black market

<p><div class="KonaFilter image-container float_right"><div class="image on-image"><p class="source"><a href="http://blog.malwarebytes.org/intelligence/2013/10/cryptolocker-ransomware-what-you-need-to-know/">Malwarebytes</a></p><p class="caption">CryptoLocker ransom message</p></div><p></p></div>Before you mail holiday gifts to faraway friends and relatives, back up your most important computer files. There's a scary new <keyword id="78543" type="UNKNOWN" weightage="60" keywordseo="computer-virus">computer virus</keyword> <a href="http://www.us-cert.gov/ncas/alerts/TA13-309A">called CryptoLocker</a> that was spreading <a href="http://thenextweb.com/insider/2013/11/15/uks-national-crime-agency-warns-mass-cryptolocker-spam-attack-takes-files-hostage/">like crazy in the U.K.</a> last month and is now crossing over to infect U.S. computers.</p>
<p>The National Crime Agency in the UK <a href="http://nationalcrimeagency.gov.uk/news/256-alert-mass-spamming-event-targeting-uk-computer-users">issued an alert</a> last month saying that <keyword id="11094" type="UNKNOWN" weightage="60" keywordseo="Hackers">hackers</keyword> have targeted "tens of millions" of computers.</p>
<p>CryptoLocker is a form of a virus called "ransomware," meaning hackers do something bad to your computer and then demand money to reverse what they've done. In this case, CryptoLocker encrypts the files on your computer. Then you get a pop-up notice on your computer telling you that you must pay if you want your files back.</p>
<p>Sometimes the hackers want $100, sometimes $300, and sometimes they want up to 2 bitcoins. They ask for bitcoins because they are difficult to trace.  Sometimes the virus gives you the option of paying through <a href="https://www.moneypak.com/">MoneyPak</a>, a site that offers pre-paid credit cards.</p>
<p>You might get 100 hours to pay. If you pay, maybe your files will be set free. Maybe they won't. Maybe you'll one day be asked to pay again.</p>
<p>Much of the time, the virus comes as an attachment to an email. The attachment is often a fake FedEx and UPS tracking notice, <a href="http://www.us-cert.gov/ncas/alerts/TA13-309A">the Homeland Security Cybercrime unit warns</a>. That's particularly dangerous during the holiday shopping season when many people are shipping packages.</p>
<p>The good news is that authorities have been finding and taking down the computer systems sending out CryptoLocker emails. Reports on <a href="http://www.techienews.co.uk/973483/138-cryptolocker-cc-domains-identified-taken/">Monday indicated that some 138 of these systems</a> have been found and blocked.</p>
<p>But infections are still running rampant. Even <a href="http://www.heraldnews.com/news/x2132756948/Swansea-police-pay-750-ransom-after-computer-virus-strikes">a police department in Swansea, Mass.,</a> was infected and paid 2 bitcoins in early November, worth about $750 at the time, reports the <a href="http://www.heraldnews.com/news/x2132756948/Swansea-police-pay-750-ransom-after-computer-virus-strikes">Herald News' Brian Fraga.</a></p>
<p>Antivirus software will help. But the best defense is to avoid opening attachments and to back up your files, <a href="http://krebsonsecurity.com/2013/11/cryptolocker-crew-ratchets-up-the-ransom/">experts say</a>.</p>

You Searched For "malwarebytes" and got 10 results

The website of a toy company has been spreading malware that holds files to ransom

James Cook

Hackers are installing malware on Macbooks - and there's nothing you can do to stop them

Alastair Stevenson

I'm a former banker, and I swear by 5 strategies to keep my money safe online

Eric Rosenberg

For the first time, Mac users have to worry about malware that locks their computer and demands a ransom

Julie Bort

Internet Perverts Called 'RATters' Are Hacking Into Women's Webcams

Geoffrey Ingersoll