Macs don't have a hosts file and neither do mobile devices. Even if you get around the redirect yourself you are going to be very lonely because there's nobody here. This is a problem that has to be handled by the board where it should be. Hopefully it's now taken care of.
It's *both*. Web site owners have an obligation to stay up top speed on security, AS DO joe blow at home people on whatever machine they got.
This is a *technology* forum, slash, chainsaws and assorted wood wrangling gear, but that doesn't alter the fact if you want to hang out on a tech forum, you shouldn't just wave your hands in the air and say you don't get it or can't do it, etc. You, anyone you, generally and broadly speaking, can do the research and learn to use the internet and your own machine better.
There was no excuse other than ignorance. and not taking the time to go look, in getting pwned when the first hack happened, because whomever got redirected, had their javascript set for full acceptance, accept everything. This is a serious no-no.
You learn not to do this within the first five minutes of reading about internet security, any operating system or browser. (except I myself plead ignorance on various mobile systems, talking about desktop/laptop systems now, I just have little experience with mobiles and still learning)
The first thing you learn, is keep your system up to date, second is control active scripting.
There's more after that, but those are the two biggees at the top.