Slashdot Mirror

← Back to Stories (view on slashdot.org)

Equifax Website Hacked Again, this Time To Redirect To Fake Flash Update (arstechnica.com)

Posted by msmash on from the fool-me-once dept.

For several hours on Wednesday Equifax's website was compromised again, this time to deliver fraudulent Adobe Flash updates, which when clicked, infected visitors' computers with adware that was detected by only three of 65 antivirus providers, reports Dan Goodin at Ars Technica. From the report: Randy Abrams, an independent security analyst by day, happened to visit the site Wednesday evening to contest what he said was false information he had just found on his credit report. Eventually, his browser opened up a page on the domain hxxp:centerbluray.info. He was understandably incredulous. The site that previously gave up personal data for virtually every US person with a credit history was once again under the control of attackers, this time trying to trick Equifax visitors into installing crapware Symantec calls Adware.Eorezo. Knowing a thing or two about drive-by campaigns, Abrams figured the chances were slim he'd see the download on follow-on visits. To fly under the radar, attackers frequently serve the downloads to only a select number of visitors, and then only once. Abrams tried anyway, and to his amazement, he encountered the bogus Flash download links on at least three subsequent visits. Update: Equifax said on Thursday it was taking one of its web pages offline as its security team looks into reports of another potential cyber breach.

4 of 150 comments (clear)

  1. This may not have been Equifax by ebrandsberg · · Score: 4, Interesting

    This sounds suspiciously like a DNS poisoning attack, which could have been impacting his ISP, but targeting a domain used by Equifax. Such attacks are completely outside of the control of the target. https://en.wikipedia.org/wiki/DNS_spoofing

    1. Re:This may not have been Equifax by Dutch+Gun · · Score: 4, Interesting

      Equifax was responsible for setting up a separate website to deal with this hack. Doing so increased the likelihood of stuff like this happening (which it has, apparently *twice* now). So, even if this "wasn't Equifax", I'm still going to blame them for failing web security fundamentals.

      --
      Irony: Agile development has too much intertia to be abandoned now.
  2. Incompetence... by rnturn · · Score: 4, Interesting

    At this point you have to wonder if it isn't time to revive the idea of a corporate death penalty.

    How long would anyone keep doing business with an armored car company that keeps forgetting to lock the doors? What's Equifax's excuse going to be this time?

    --
    CUR ALLOC 20195.....5804M
  3. I'm shocked by DontBeAMoran · · Score: 4, Interesting

    I'm more shocked to know there's 65 antivirus providers. Is Windows really that bad?

    --
    #DeleteFacebook