Equifax is dealing with yet another security issue

This post was originally published on this site
Consumer watchdog chief wants more scrutiny for Equifax

Consumer watchdog chief wants more scrutiny for Equifax

Equifax has taken down a webpage after a visitor reported being targeted with malicious advertising.

Security analyst Randy Abrams first discovered the malicious pop-up message when he visited the Equifax website to confirm personal data, he told CNN Tech. What he found instead was yet another security issue for the credit agency.

A malicious pop-up asked Abrams to download something claiming to be Adobe Flash. But as Ars Technica initially reported, security companies consider the file adware.

“We are aware of the situation identified on the equifax.com website in the credit report assistance link,” an Equifax spokesperson said in an email. “Our IT and Security teams are looking into this matter, and out of an abundance of caution have temporarily taken this page offline.”

It’s the latest security issue for the credit agency after hackers stole data on more than 145 million people through an unpatched hole in the company’s software. Equifax announced the massive security breach last month. Federal and state agencies are now probing the hack.

Related: Equifax breach impacted 2.5 million more people than originally stated

The adware appeared on a part of the Equifax (EFX) website where people can learn how to get a free or discounted credit report. As of Thursday afternoon, that website is no longer available.

“The website is currently down for maintenance,” a note on the page says. “We are working diligently to better serve you, and apologize for any inconvenience this may cause. We appreciate your patience during this time and ask that you check back with us soon.”

Abrams says he was able to duplicate the pop-up four or five times, but that Equifax itself was likely not hacked.

“Equifax was a portal and probably not directly hacked or compromised,” he said.

Experts say the security issue may be a result of a third-party analytics or advertising company used by Equifax displaying the adware. Many websites use analytics companies to track people who visit their sites.

Consumers should never click on pop-ups that unexpectedly ask you to download software. This type of adware could hijack your browser, serve up fraudulent search results, and lead to more pop-up ads.

Be Sociable, Share!

Related Posts

 

MarketTamer is not an investment advisor and is not registered with the U.S. Securities and Exchange Commission or the Financial Industry Regulatory Authority. Further, owners, employees, agents or representatives of MarketTamer are not acting as investment advisors and might not be registered with the U.S. Securities and Exchange Commission or the Financial Industry Regulatory.


This company makes no representations or warranties concerning the products, practices or procedures of any company or entity mentioned or recommended in this email, and makes no representations or warranties concerning said company or entity’s compliance with applicable laws and regulations, including, but not limited to, regulations promulgated by the SEC or the CFTC. The sender of this email may receive a portion of the proceeds from the sale of any products or services offered by a company or entity mentioned or recommended in this email. The recipient of this email assumes responsibility for conducting its own due diligence on the aforementioned company or entity and assumes full responsibility, and releases the sender from liability, for any purchase or order made from any company or entity mentioned or recommended in this email.


The content on any of MarketTamer websites, products or communication is for educational purposes only. Nothing in its products, services, or communications shall be construed as a solicitation and/or recommendation to buy or sell a security. Trading stocks, options and other securities involves risk. The risk of loss in trading securities can be substantial. The risk involved with trading stocks, options and other securities is not suitable for all investors. Prior to buying or selling an option, an investor must evaluate his/her own personal financial situation and consider all relevant risk factors. See: Characteristics and Risks of Standardized Options. The www.MarketTamer.com educational training program and software services are provided to improve financial understanding.


The information presented in this site is not intended to be used as the sole basis of any investment decisions, nor should it be construed as advice designed to meet the investment needs of any particular investor. Nothing in our research constitutes legal, accounting or tax advice or individually tailored investment advice. Our research is prepared for general circulation and has been prepared without regard to the individual financial circumstances and objectives of persons who receive or obtain access to it. Our research is based on sources that we believe to be reliable. However, we do not make any representation or warranty, expressed or implied, as to the accuracy of our research, the completeness, or correctness or make any guarantee or other promise as to any results that may be obtained from using our research. To the maximum extent permitted by law, neither we, any of our affiliates, nor any other person, shall have any liability whatsoever to any person for any loss or expense, whether direct, indirect, consequential, incidental or otherwise, arising from or relating in any way to any use of or reliance on our research or the information contained therein. Some discussions contain forward looking statements which are based on current expectations and differences can be expected. All of our research, including the estimates, opinions and information contained therein, reflects our judgment as of the publication or other dissemination date of the research and is subject to change without notice. Further, we expressly disclaim any responsibility to update such research. Investing involves substantial risk. Past performance is not a guarantee of future results, and a loss of original capital may occur. No one receiving or accessing our research should make any investment decision without first consulting his or her own personal financial advisor and conducting his or her own research and due diligence, including carefully reviewing any applicable prospectuses, press releases, reports and other public filings of the issuer of any securities being considered. None of the information presented should be construed as an offer to sell or buy any particular security. As always, use your best judgment when investing.