French Pastry Fans Targeted with Malware
Ladurée's Web site was found to be redirecting visitors to a site hosting the BlackHole exploit kit.
According to Trend Micro researchers, the Web site of French pastry company Ladurée was recently compromised.
"The site (at laduree.fr) has been modified to redirect users to another site hosting the BlackHole exploit kit," writes Help Net Security's Zeljka Zorz. "Once it took advantage of vulnerabilities on the visitors' computer, it would saddle the machine with the ransomware, which would promptly block it and display a fake notification from the French Police."
"The message said that the users' computer was blocked because it was sending out spam and pornographic images and because the users were making illegal downloads," Zorz writes. "In order to get it unblocked, they would have to pay 200 euros via Ukash or Paysafecard."
Go to "Pastry lovers served with ransomware via exploit kit" to read the details.
For regular security news updates, follow eSecurityPlanet on Twitter: @eSecurityP.