Equifax or Equiphish?
Summary: After Equifax announced on Sept. 7 that it had lost control over Social Security numbers, dates of birth and other sensitive data on 143 million Americans, its TrustedID notification emails were sent from trustedid.com but asked recipients to click through to trustedidpremier.com, a confusingly similar domain only a few weeks old. That new domain was flagged as a phishing site by multiple browsers in the first hours after the breach disclosure, is registered to a WHOIS privacy service with nothing tying it to Equifax, and is hosted at Amazon.
What's compelling: Equifax trained 143 million breach victims to click a link from one domain to a brand-new, privacy-masked lookalike - the exact pattern phishing filters are built to catch - so the lesson recipients learned is the opposite of the one the company needed them to learn.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026