Credit report breach has link to Zeus banking malware

The website used to release the information can be traced to a Zeus-related email address

By , IDG News Service |  Security

Even after the data breach had generated significant media coverage, the website continued to add data on more celebrities. But Terban noted the links to government officials became inoperable, even though the links to celebrity data still worked, indicating some sort of intervention was occurring before it fell offline.

For some time, Exposed.su used CloudFlare, a company that provides a service that speeds delivery of web pages by using a network of worldwide data centers to deliver a website's content.

The company offers a free service, which appears to be attractive to legitimate websites and more nefarious ones. CloudFlare, which would not comment on Exposed.su, will disconnect a site if it violates its terms of service.

The source of some of the credit reports was "Annualcreditreport.com," a site setup by TransUnion, Experian and Equifax, the three main U.S. credit-rating agencies. Hackers obtained the reports by correctly guessing security questions, such as the cost of a person's mortgage payment.

A credit report released on Exposed.su for celebrity Paris Hilton listed the source as Freecreditreport.com, which is administered by Experian.

The Freecreditreport.com website was rejecting visitors from outside the U.S. on Monday. A customer service representative confirmed people from outside the U.S. are blocked from accessing the site. It was unclear if the site's configuration is related to the latest data breach.

Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk

Join us:
Facebook

Twitter

Pinterest

Tumblr

LinkedIn

Google+

Spotlight on ...
Online Training

    Upgrade your skills and earn higher pay

    Readers to share their best tips for maximizing training dollars and getting the most out self-directed learning. Here’s what they said.

     

    Learn more

Answers - Powered by ITworld

ITworld Answers helps you solve problems and share expertise. Ask a question or take a crack at answering the new questions below.

Ask a Question