Equifax website borked again, this time to redirect to fake Flash update

ars technica ^ | 10/12/2017 | DAN GOODIN

[Leaning Right]

In May credit reporting service Equifax's website was breached by attackers who eventually made off with Social Security numbers, names, and a dizzying amount of other details for some 145.5 million US consumers.

For several hours on Wednesday, and again early Thursday morning, the site was maliciously manipulated again, this time to deliver fraudulent Adobe Flash updates, which when clicked, infected visitors' computers with adware that was detected by only three of 65 antivirus providers.

[Leaning Right]

Another day, another Equifax breach. Hillary must be loving this. Because compared to Equifax, Hillary looks like a cybersecurity expert.

[robroys woman]

Anytime ANYTHING prompts me to update flash, I move on...

[dfwgator]

[Red Badger]

Fake Flash update?

How could they tell?................

[Leaning Right]

> How could they tell?................ <

A cybersecurity expert was visiting the Equifax site to check on some personal information. He was directed to a “Flash update” page. He noticed that the “update” page was on a domain that nothing to do with Adobe, the makers of Flash.

For example, to download a Flash update, better go to Adobe’s actual site. You wouldn’t want to download an update that’s on some domain like BigOldGreenBalloons.net (I just made that site up, but you get the idea).

The problem is that many fake domains choose names that are very close to the real domain names.

[veracious]

When are the _USA_ corporations going to be held accountable? There needs be serious penalties, retribution against these ongoing leaking corporations.

[Aevery_Freeman]

>>"only three of 65 antivirus providers"

Which ones!

[Leaning Right]

Panda, Symantec, and Webroot detected the antivirus.

[Leaning Right]

Ugh, sorry. Post #8 should have read:

Panda, Symantec, and Webroot detected the virus.

[rfp1234]

Who borked it, Ted Kennedy’s ghost?

[oh8eleven]

infected visitors' computers with adware
Well, if I had a choice, I'd take the adware infection over ransomware anyday.

[Leaning Right]

Before posting the article, I actually had to look up what “borked” meant.

[usconservative]

At what point does the Federal Government walk in and tell Equifax to shut their shit down and arrest those in charge of "security"????

I was affected by their lax security which in order to protect myself required I lock all three of my credit reports and upgrade my Lifelock to their Premium package.

Total cost to me: $335.40 for a year of LifeLock and $30 to lock my credit reports at each of the three credit reporting agencies. These expenses aren't just for this year, I'll be paying them every year the rest of my life to protect myself!

Who at Equifax do I sue for these unexpected expenses to protect my credit rating?

[ptsal]

Harvey Weinstein may offer Equifax a cameo slot in his next movie.

But first, the test on the casting couc....

[Leaning Right]

> At what point does the Federal Government walk in and tell Equifax to shut their shit down and arrest those in charge of “security”???? <

The chart at the link below shows what Equifax spends on lobbying politicians. Take a quick look at the chart and you’ll realize that the answer to your question is “never”.

https://www.opensecrets.org/lobby/clientsum.php?id=D000025712

[caligatrux]

At what point does the Federal Government walk in and tell Equifax to shut their shit down and arrest those in charge of "security"????

I don't think the Federal Government even knows what cybersecurity is. See: the Awan brothers.

[EVO X]

Who at Equifax do I sue for these unexpected expenses to protect my credit rating?

I guess that is why you would hire a lawyer to find out. A retainer for that might be 10 years worth of LifeLock payments. Hiring your own attorney seems out of question unless you had ID theft. You could explore signing up with an existing class action lawsuit. I am doing the 90 day fraud alert and seeing how this develops.

[usconservative]

You could explore signing up with an existing class action lawsuit. I am doing the 90 day fraud alert and seeing how this develops.

A 90 day fraud alert is useless when your identity is used Day #91 to establish credit and run up debt in your name ...............

[EVO X]

I understand the window. Will probably go with a freeze in the near future.

[tbw2]

And yet the IRS gave them a contract?
And yet financial institutions are still giving them our data?