Admittedly, the hack in question was an elusive one. According to a FOX IT report, the Angler toolkit which had infected the site would further infect those who visited the site from a major search engine and were using Internet Explorer — likely suggesting a less than stellar knowledge of Internet security.
What’s heartbreaking is that the visitors were themselves clearly trying to learn — they were, after all, looking up courses on improving security.
But unfortunately the very site they visited was the one making the visitors vulnerable. So now a security firm has gone public (via Ars) with the information, in the hopes that it encourages action and discourages people from visiting the site until it’s safe again.
Related:Â Update: Mac ransomware may have flaws that allow file recovery
The notice states visitors who meet the criteria for infection may find themselves redirected  to the Angler toolkit landing page, which then uses Flash or Silverlight plugins to infect the victim’s local machine with more malware.
Most worrisome is that the malware it then dumps on the user’s system is TeslaCrypt, a ransomware that immediately encrypts the user’s files and demands a 1.5 bitcoin ransom (equal to around $624) to decrypt them — potentially meaning that visitors to the CEH site could lose all of their important and personal files and images.
The malware program is very traditional too, offering just the payment option — unlike others, there is no offer to sign on as an affiliate.
Editors' Recommendations
- This concept reimagines a classic Mac app in desperate need of a revamp
- Hacking-as-a-service lets hackers steal your data for just $10
- Twitter profiles for businesses just got way more useful
- Hackers have found a way to log into your Microsoft email account
- Google Meet and Google Duo begin confusing merger
