Massive Equifax Data Breach - 140 Million Americans Affected

[hongkonger]

https://trustedidpremier.com/eligibi...igibility.html





Unless the hackcheck thing is really just spitting out nonsense, in which case never mind.

It isnt . fuck me

Me too

[sonatine]

Meanwhile, at their Argentinian office, admin accounts used default user/passes (admin/admin), and once in there, employee user/passes were stored in plain text within the SOURCE CODE of the web application. So you could just casually ctrl+U and see everyone's shit.

https://medium.com/@powerb91/equifax...e-170ed47d2a27

not sure how the argentina issues played into this breach but apparently the entry point was an unpatched apache struts instance.

also fwiw a lot of people had unpatched struts on their dmz webservers but so very, very few had such poor defense in depth that they could allow that to be leveraged into a Total Compromise of the crown jewels.

[Deal]

[QUOTE=Dan Druff;700811]https://trustedidpremier.com/eligibi...igibility.html

[quote]


Why would a self professed computer expert and site admin of a fraud site fall for and then advertise a honeypot?

[Kuntmissioner]

[MrTickle]

[sonatine]

definitive writeup (so far) of the compromise:


http://spuz.me/blog/zine/3Qu1F4x.html

not exactly an IR writeup but lots of choice bits and pieces.

[4Dragons]