Update: Third party analysis tends to indicates something that is conceptually the same as malvertising. Watch the video and replace Equifax with your favorite website. It happens every day throughout the world. Now it's a security training video.
I like Equifax more than Experian. TrustedID gave me the
heads up that Experian had falsified personal information in my file. After
verifying that Experian did in fact falsify the data (it was due to
incompetence and apathy) I decided to see if the misinformation had propagated
to Equifax. As I tried to find my credit report on the Equifax website I
clicked on an Equifax link and was redirected to a malicious URL. The URL
brought up one of the ubiquitous fake Flash Player Update screens.
For all of you voyeurs...
Seriously folks. Equifax has enough on their plate trying
to update Apache. They are not going to help you update Flash.
I know that nobody is surprised at my find, but watching
Equifax is getting to be like watching a video of United Airlines “deplaning” a
passenger... It hurts.
And once again Equifax, all I want from you are my credit
scores. Please?
Independent Security Analyst
