Help Keep 12160.info ALIVE!!

  It's been 18 months since We've asked for Donations, Now is the time to come to the aid of YOUR web site

Requested! donations via Mail or -use Paypal
THANK YOU !!
If we can not come up with the funds for the site, 12160 will be no more.
Please find it within you to help us out and meet our goal in the next couple of months. Any donation, no matter what amount will be greatly appreciated.

Equifax website borked again, this time to redirect to fake Flash update

In May credit reporting service Equifax's website was breached by attackers who eventually made off with Social Security numbers, names, and a dizzying amount of other details for some 145.5 million US consumers. For several hours on Wednesday, and again early Thursday morning, the site was maliciously manipulated again, this time to deliver fraudulent Adobe Flash updates, which when clicked, infected visitors' computers with adware that was detected by only three of 65 antivirus providers.

Randy Abrams, an independent security analyst by day, happened to visit the site Wednesday evening to check what he said was false information he had just found on his credit report. Eventually, his browser opened up a page on the domain hxxp//:centerbluray.info that looked like this:


Randy Abrams



He was understandably incredulous. The site that previously gave up personal data for virtually every US person with a credit history was once again under the influence of attackers, this time trying to trick Equifax visitors into installing crapware Symantec calls Adware.Eorezo. Knowing a thing or two about drive-by campaigns, Abrams figured the chances were slim he'd see the download on follow-on visits. To fly under the radar, attackers frequently serve the downloads to only a select number of visitors, and then only once.

Abrams tried anyway, and to his amazement, he encountered the bogus Flash download links on at least three subsequent visits. The picture above this post is the higher-resolution screenshot he captured during one visit. He also provided the video below. It shows an Equifax page redirecting the browser to at least four domains before finally opening the Flash download at the same centerbluray.info page.



Equifax Flash Download

The file that got delivered when Abrams clicked through is called MediaDownloaderIron.exe. This VirusTotal entry shows only Panda, Symantec, and Webroot detecting the file as adware. This separate malware analysis from Payload Security shows the code is highly obfuscated and takes pains to conceal itself from reverse engineering. Malwarebytes flagged the centerbluray.info site as one that pushes malware, while both Eset and Avira provided similar malware warnings for one of the intermediate domains, newcyclevaults.com.

https://arstechnica.com/information-technology/2017/10/equifax-webs...

Views: 121

Comment

You need to be a member of 12160 Social Network to add comments!

Join 12160 Social Network

 

 

Latest Activity

Boris Badenov replied to Chuck Smith's discussion THE MUELLER PROBE FRAUD TO KEEP YOU SUPPORTING TRUMP WHILE HE BETRAYS US.
"IT is factions within nwo inc fighting each other more than anything IMO Everybody has a button, this one aint mine. Mueller a proven traitor, Trump, hasn't"
6 minutes ago
Boris Badenov favorited honeygirl's profile
12 minutes ago
honeygirl commented on Sweettina2's blog post FLASHBACK -- Alex Jones Attorney Say in court he is "No more than a showman" & "Performance artist playing a character"
22 minutes ago
Chris of the family Masters commented on Sweettina2's video
Thumbnail

LOOK WHAT STATUE JUST WENT UP IN ARKANSAS

"When people don't even know what 'this thing' is, checkmate, the satanists show their hand."
24 minutes ago
honeygirl commented on Sweettina2's blog post FLASHBACK -- Alex Jones Attorney Say in court he is "No more than a showman" & "Performance artist playing a character"
25 minutes ago
Chris of the family Masters favorited Sweettina2's video
31 minutes ago
Sweettina2 posted videos
55 minutes ago
Boris Badenov commented on DTOM's photo
Thumbnail

GOAT FUCKER

"Pitbull Dies From Sexual Abuse Just 2 Weeks After adopted in LA https://www.youtube.com/watch?v=Hi_Yv2KaOU4"
56 minutes ago
Diana commented on Boris Badenov's photo
Thumbnail

Police use Taser on 87-year-old woman cutting dandelions with a knife

"But she was armed with a kitchen knife, 87 years old and maybe weighs 100 pounds...we don't know how scary that must have been for a couple of trained police officers.  <sarcasm>"
1 hour ago
Deep Space commented on Sweettina2's blog post FLASHBACK -- Alex Jones Attorney Say in court he is "No more than a showman" & "Performance artist playing a character"
1 hour ago
Deep Space commented on Sweettina2's blog post FLASHBACK -- Alex Jones Attorney Say in court he is "No more than a showman" & "Performance artist playing a character"
"Reminds of the fake Rachael Maddow cry."
1 hour ago
James T. Kirk posted a status
1 hour ago
James T. Kirk posted a status
1 hour ago
Diana favorited Boris Badenov's photo
1 hour ago
Diana posted photos
1 hour ago
Boris Badenov commented on Diana's photo
Thumbnail

F-BOOK

"Fuk Facebook - 12160.info/group/fuk-facebook"
1 hour ago
Sweettina2 commented on Sweettina2's blog post Walter Cronkite: Give Up Sovereignty For New World Order Governance
"My pastor taught truth, right from the Word. The government, FEMA, contacted him about signing the church to them. Instead he gave up the 501 3c status. "
1 hour ago
Sweettina2 commented on Sweettina2's blog post FLASHBACK -- Alex Jones Attorney Say in court he is "No more than a showman" & "Performance artist playing a character"
"AHAHAHAAAAAAAA!!!! I JUST SAW THE FISH PEOPLE FOR THE FIRST TIME!!!!!!!!"
1 hour ago
Boris Badenov posted a photo
1 hour ago
Sweettina2 commented on Sweettina2's blog post FLASHBACK -- Alex Jones Attorney Say in court he is "No more than a showman" & "Performance artist playing a character"
"Oh, yeah, DTOM, I've got an old video of him saying he supports Israel, and worse. That rat b@$tard has begun debating me TWICE and slammed the phone down. I simply asked how he felt about political Zionism. He went on rants about "Jew…"
1 hour ago

Please remember this website is supported by your donations...

© 2018   Created by truth.   Powered by

Badges  |  Report an Issue  |  Terms of Service

content and site copyright 12160.info 2007-2015 - all rights reserved. unless otherwise noted