Visit our new website: worldnews.easybranches.com

Equifax rival TransUnion also sends site visitors to malicious pages

  • Fri, 13 Oct 2017 05:40

Enlarge / One of the bad pages delivered after researcher Jérôme Segura visited transunioncentroamerica.com (credit: Jérôme Segura)

Equifax isn't the only credit-reporting behemoth with a website redirecting visitors to fake Adobe Flash updates. A security researcher from AV provider Malwarebytes said transunioncentroamerica.com, a TransUnion site serving people in Central America, is also sending visitors to the fraudulent updates and other types of malicious pages.

As Ars reported late Wednesday night, a portion of Equifax's website was redirecting visitors to a page that was delivering fraudulent Adobe Flash updates. When clicked, the files infected visitors' computers with adware that was detected by only three of 65 antivirus providers. On Thursday afternoon, Equifax officials said the mishap was the result of a third-party service Equifax was using to collect website-performance data and that the "vendor's code running on an Equifax website was serving malicious content." Equifax initially shut down the affected portion of its site, but the company has since restored it after removing the malicious content.

Now, Malwarebytes security researcher Jérôme Segura says he was able to repeatedly reproduce a similar chain of fraudulent redirects when he pointed his browser to the transunioncentroamerica.com site. On some occasions, the final link in the chain would push a fake Flash update. In other cases, it delivered an exploit kit that tried to infect computers with unpatched browsers or browser plugins. The attack chain remained active at the time this post was going live.

Read 7 remaining paragraphs | Comments

Biz & IT – Ars Technica

Tags


Businessweek

Related Stories

Clumsy French spy sends text message to the radical Islamist he was keeping tabs on
  • Sat, 14 Oct 2017 09:45

A member of the French intelligence services has landed himself in hot water after sending a text message containing information on a radical Islamist...

Sukhothai man praised for building unmanned tractor
  • Sat, 14 Oct 2017 09:42

SUKHOTHAI: A 35-year-old man in this northern province is being hailed for his acumen after a video of his remote-controlled tractor ploughing a floo...

Great Firewall of China
  • Sat, 14 Oct 2017 06:09

(Bloomberg) So much for the lofty goals of the internet, breaking down information barriers and fomenting the free flow of ideas across the globe. C...

Fandango is acquiring rival online ticketer MovieTickets.com
  • Sat, 14 Oct 2017 03:41

 A consolidation in the advance movie ticketing space is happening today, with Fandango’s announcement that it’s acquiring rival Movi...

IRS puts Equifax contract on hold during security review
  • Sat, 14 Oct 2017 02:51

NEW YORK (Reuters) - The U.S. Internal Revenue Service has temporarily suspended a contract worth more than $ 7 million it recently awarded to Equifa...

Google Assistant can finally control Chromecast from your phone
  • Sat, 14 Oct 2017 01:50

Google's Assistant app is capable of lots of things, but before today, controlling a cast session by voice wasn't really possible. Android P...

Statue of Liberty
  • Sat, 14 Oct 2017 00:43

The copper lady dressed in robes that stands at the entrance to New York harbor is one of the largest statues ever built. Her full name is Liberty Enl...

Coinbase unlocks instant cryptocurrency purchases
  • Fri, 13 Oct 2017 23:42

Want your bitcoin purchases in a hurry? That's doable now that Coinbase has opened up instant purchases for cryptocurrency. Whether you're a...

Social commerce startup Meesho gets $3.4M Series A to build a reseller network in India
  • Fri, 13 Oct 2017 22:43

 While most of the attention paid to India’s e-commerce boom focuses on big players like Flipkart, there’s another fast-growing secto...

Uber embarks on legal battle to retain London license
  • Fri, 13 Oct 2017 21:56

LONDON (Reuters) - Uber [UBER.UL] lodged a court appeal on Friday to overturn a decision by London's transport regulator that stripped the taxi app of...

How to choose a TV antenna
  • Fri, 13 Oct 2017 19:41

Putting up a TV antenna is one of the best steps you can take to breaking your reliance on pay TV. Most areas of the U.S. have access to several dozen...

Romance swindle suspects nabbed
  • Fri, 13 Oct 2017 18:46

The Immigration Bureau (IB) has nabbed two Nigerian nationals and an Indian man in Bangkok for allegedly running romance scams. Bangkokpost.com : Tec...


News Categories
Latest Stories