Equifax Site Hacked Again? Links Redirect Users to Malicious URL

One month after news came out about a massive breach at Equifax, the credit bureau is still struggling with the fallout. The latest blow arrived yesterday when an independent security researcher reported discovering that links on the Equifax Web site were attempting to redirect him to a malicious URL.

In a blog post yesterday, analyst Randy Abrams said that he visited the Equifax site to check and see whether false information from another credit bureau had made its way into his credit report on Equifax. When he tried to access his personal information, he said he was redirected to a site with a fake Flash Player update screen. In a tweet yesterday, Abrams said it appeared that the issue might indicate Equifax' Web site had been breached again.

Equifax revealed in early September that its systems had been compromised sometime between May and July, causing sensitive personal data for around 143 million Americans, as well as a number of Canadian and British citizens, to be exposed. Early this month, the company increased its estimate of the number of U.S. victims by 2.5 million. The U.K.'s National Cyber Security Centre reported yesterday that nearly 700,000 Britons might have been affected by the breach.

Flash Update Link a Red Flag

Abrams noted on his blog that he "just sort of tripped over" the latest problem at Equifax' Web site while trying to view his credit information. The appearance of a Flash update site was an immediate red flag, according to Abrams.

"Seriously folks, Equifax has enough on their plate trying to update Apache," he said. "They are not going to help you update Flash. I know that nobody is surprised at my find, but watching Equifax is getting to be like watching a video of United Airlines 'deplaning' a passenger . . . It...

Comments are closed.