Equifax Credit Assistance Site Served Spyware
Summary: Equifax removed third-party code from its credit report assistance site after security expert Randy Abrams found that clicking an Equifax link redirected him to a fake Adobe Flash Player update page serving spyware detected by several antivirus tools as Adware.Eorezo. Equifax said the problem came from code run by a third-party vendor that collects website performance data, and that its systems were not compromised and its consumer online dispute portal was unaffected.
Bottom line: The malicious content traced to a defunct web analytics service whose domain was released and later acquired by scammers, meaning Equifax kept running code pointing at a domain it no longer controlled - and Malwarebytes found a similar hole on TransUnion's Central American site.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026