Exxon Mobil Bungles Rewards Card Debut
Summary: ExxonMobil's Plenti rewards replacement mailer directed customers to exxonmobilrewardsplus[dot]com, a parked page that prompted Chrome to install a "Browsing Safely" extension changing the default search engine to Yahoo and routing searches through lastlog[dot]in, and gave the phone number "1-888-REWARD+" where the "+" means zero. A customer service representative said the rewards site would not be active until July 11, and ExxonMobil later registered exxonandmobilrewardsplus.com as the program domain.
What you should know: A company that made $20 billion the prior year sent customers to a domain it did not yet control, and anyone dialing a different final digit reached a cruise pitch or an adult chat line instead of the rewards program.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026