Malvertising on Equifax, TransUnion tied to third party script (updated)

Credit to Author: Jérôme Segura| Date: Thu, 12 Oct 2017 21:42:28 +0000

We take a look at the the recent malvertising incident that happened on Equifax’s site and show how it also affected TransUnion.

Categories:

Tags:

(Read more…)

The post Malvertising on Equifax, TransUnion tied to third party script (updated) appeared first on Malwarebytes Labs.

Read more

Malvertising on Equifax, TransUnion tied to third party script

Credit to Author: Jérôme Segura| Date: Thu, 12 Oct 2017 21:42:28 +0000

Equifax’s website is once again infected, this time with malvertising that redirects to a fake Flash player. Further investigation reveals TransUnion was also targeted.

Categories:

Tags:

(Read more…)

The post Malvertising on Equifax, TransUnion tied to third party script appeared first on Malwarebytes Labs.

Read more

Malvertising on Equifax, TransUnion tied to 3rd party library

Credit to Author: Jérôme Segura| Date: Thu, 12 Oct 2017 21:42:28 +0000

Equifax’s website is once again infected, this time with malvertising that redirects to a fake Flash player. Further investigation reveals TransUnion was also targeted.

Categories:

Tags:

(Read more…)

The post Malvertising on Equifax, TransUnion tied to 3rd party library appeared first on Malwarebytes Labs.

Read more

Equifax, TransUnion websites push fake Flash Player in malvertising campaign

Credit to Author: Jérôme Segura| Date: Thu, 12 Oct 2017 21:42:28 +0000

Equifax’s website is once again infected, this time with malvertising that redirects to a fake Flash player. Further investigation reveals TransUnion was also targeted.

Categories:

Tags:

(Read more…)

The post Equifax, TransUnion websites push fake Flash Player in malvertising campaign appeared first on Malwarebytes Labs.

Read more

Labs report: summer ushers in unprecedented season of breaches

Credit to Author: Malwarebytes Labs| Date: Thu, 12 Oct 2017 16:00:27 +0000

In this edition of the Malwarebytes Cybercrime Tactics and Techniques report, we saw a number of high profile breaches targeting the personal information of hundreds of millions of people. We also observed shifts in malware distribution, the revival of some old families, and found cases of international tech support scams.

Categories:

Tags:

(Read more…)

The post Labs report: summer ushers in unprecedented season of breaches appeared first on Malwarebytes Labs.

Read more

Equifax Breach Fallout: Your Salary History

Credit to Author: BrianKrebs| Date: Sun, 08 Oct 2017 18:56:50 +0000

In May, KrebsOnSecurity broke a story about lax security at a payroll division of big-three credit bureau Equifax that let identity thieves access personal and financial data on an unknown number of Americans. Incredibly, this same division makes it simple to access detailed salary and employment history on a large portion of Americans using little more than someone’s Social Security number and date of birth — both data elements that were stolen in the recent breach at Equifax.

Read more

Fear Not: You, Too, Are a Cybercrime Victim!

Credit to Author: BrianKrebs| Date: Wed, 04 Oct 2017 04:34:50 +0000

Maybe you’ve been feeling left out because you weren’t among the lucky few hundred million or billion who had their personal information stolen in either the Equifax or Yahoo! breaches. Well buck up, camper: Both companies took steps to make you feel better today. Yahoo! announced that, our bad!: It wasn’t just one billion users who had their account information filched in its record-breaking 2013 data breach. It was more like three billion (read: all) users. Meanwhile, big three credit bureau Equifax added 2.5 million more victims to its roster of 143 million Americans who had their Social Security numbers and other personal data filched in a breach earlier this year. At the same time, Equifax’s erstwhile CEO informed Congress that the breach was the result of even more bone-headed security than was first disclosed. To those still feeling left out by either company after this spate of news, I have only one thing to say (although I feel a bit like a broken record in repeating this): Assume you’re compromised, and take steps accordingly.

Read more