Equifax sent people to fake website

[Ombligo]

At some point, they just need to wipe the drives and lock the doors....

Credit rating firm Equifax has apologised after it mistakenly directed some customers to an imposter website via its Twitter page.
The firm recently disclosed a data breach affecting more than 143 million people, and set up a new website to share information with customers.
But it mistakenly tweeted the wrong web address several times, leading some customers to a fake website.

Security researcher Nick Sweeting tweeted: "Yeah... no thanks... it would take me literally 20 mins to build a clone of this site."
He then did exactly that, creating an almost identical version of the website at securityequifax2017.com.
His fake version of the website also let people fill in their personal information - but then told them they had been "bamboozled".
Staff operating the Equifax twitter feed shared the fake website with customers several times.

http://www.bbc.com/news/technology-41347467

[NewtonMP2100]

.....so they even tell the difference between....fax [ fact ]....and fiction......??

[mikebw]

What a freakin' mess. We need to dump Equifax entirely.

[Acer]

The whole credit report enterprise should be chucked. You want to borrow money, take in some paycheck stubs, bank statements and paid utility bills. If you can't provide any of the three, you should not be borrowing money nor should anyone lend you any. :oldfogey:

[GuyGene]

:agree:

[Speedy]

mikebw wrote:
What a freakin' mess. We need to dump Equifax entirely.

Actually, I hope they remain a going concern so that people can recover damages.

[cbelt3]

fortunate they are that an actual White Hat responded.

[bik]

cbelt3 wrote:
fortunate they are that an actual White Hat responded.

What makes you think a Black Hat didn't?

[hal]

Ya gotta be exact when passing on a URL.

Years ago, I once told a customer who was having problems getting her email to try a site for just viewing your email on the www. I told her to go to 'mailtoweb.com'.

She called me later absolutely furious because she passed the info onto her daughter who proceeded to visit 'MALEtoweb.com' - let's just say that it wasn't much help to her...

[jonny]

Acer wrote:
The whole credit report enterprise should be chucked. You want to borrow money, take in some paycheck stubs, bank statements and paid utility bills. If you can't provide any of the three, you should not be borrowing money nor should anyone lend you any. :oldfogey:

From today's Times: https://www.nytimes.com/2017/09/21/opini...tion=click&pgtype=Homepage&clickSource=story-heading&module=opinion-c-col-right-region®ion=opinion-c-col-right-region&WT.nav=opinion-c-col-right-region&_r=0