Scam Of The Week: Equifax Settlement Phishing



scam_of_the_week-2Well, that did not take long! The Equifax Data Breach resulted in a settlement and those affected have a choice between free credit monitoring or a $125 payment.
 
Internet lowlifes are now targeting victims of the Equifax data breach with phishing attacks and are spoofing Equifax’s settlement page. Here is an example of the phishing email:
Equifax-Phishing-1-1-1024x735

This is a fake email and your users should just report it as such. If they fall for it and click on the link, they are likely winding up on a spoofed site that looks very similar to the existing Equifax settlement page:

Equifax-Phishing-2-1-1024x687

There, they are going to be exposed to a social engineering scam, trying to steal as much data as possible.

I suggest you send the following to your employees, friends and family. Feel free to copy/paste/edit: 

ALERT: Internet bad guys are now trying to trick you into filing an Equifax claim and get a $125 payment because your personal data was in the Equifax data breach.  They are sending phishing attacks that look like they come from Equifax and when you click on the links, you wind up on a fake website that looks like it's Equifax, but will try to steal your personal information. Don't fall for it.

if you want to file a claim, go the legit FTC website and click on the blue "File a Claim" button. The website will check your eligibility for that claim, not everyone's information was compromised.  Here is the link to the FTC site: https://www.ftc.gov/enforcement/cases-proceedings/refunds/equifax-data-breach-settlement

For KnowBe4 customers, we have a template ready for you so that you can inoculate your users against this attack. It's under Current Events: Equifax: Recent Data Compromise (Link) 

Let's stay safe out there.

Warm regards,

Stu Sjouwerman,

Founder and CEO, KnowBe4, Inc.

NewStu-6

Read more at: https://www.thesslstore.com/blog/equifax-settlement-dont-get-phished-by-scammers/




Subscribe to Our Blog


Comprehensive Anti-Phishing Guide




Get the latest about social engineering

Subscribe to CyberheistNews