Thursday, September 21, 2017

Is Equifax the stupidest company?

Equifax has made a number of mistakes handling the hacking of its site. The latest one involves sending people who accessed the company's real site to a fake web site. Nick Sweeting, a software engineer, created an imitation of equifaxsecurity2017.com, Equifax’s page about the security breach that may have exposed 143 million Americans’ personal information. He named it securityequifax2017.com. Equifax's Twitter account directed consumers to Sweeting’s version,  This happened about 200,000 times. Eventually, Equifax corrected the mistake.  

Sweeting built the fake site to simply make a point about Equifax's abilities. Although the layout was the same as the real version, a headline in large text differed: “Cybersecurity Incident & Important Consumer Information Which is Totally Fake, Why Did Equifax Use A Domain That’s So Easily Impersonated By Phishing Sites?”

No comments: