Massive Equifax Data Breach - 140 Million Americans Affected

Quote:

---

Originally Posted by cmoney

Quote:

---

Originally Posted by Dan Druff

https://trustedidpremier.com/eligibi...igibility.html



:yes

Unless the hackcheck thing is really just spitting out nonsense, in which case never mind.

---

It isnt . fuck me

---

Me too

Quote:

---

Originally Posted by sonatine

Quote:

---

Originally Posted by SrslySirius

Meanwhile, at their Argentinian office, admin accounts used default user/passes (admin/admin), and once in there, employee user/passes were stored in plain text within the SOURCE CODE of the web application. So you could just casually ctrl+U and see everyone's shit.

:facepalm2

---

https://medium.com/@powerb91/equifax...e-170ed47d2a27

not sure how the argentina issues played into this breach but apparently the entry point was an unpatched apache struts instance.

---

also fwiw a lot of people had unpatched struts on their dmz webservers but so very, very few had such poor defense in depth that they could allow that to be leveraged into a Total Compromise of the crown jewels.

[QUOTE=Dan Druff;700811]https://trustedidpremier.com/eligibi...igibility.html

[quote]


Why would a self professed computer expert and site admin of a fraud site fall for and then advertise a honeypot?

definitive writeup (so far) of the compromise:


http://spuz.me/blog/zine/3Qu1F4x.html

not exactly an IR writeup but lots of choice bits and pieces.

https://www.youtube.com/watch?v=Onf-Lvts4PA