4 ms·
>The attack vector used in this incident occurred through a vulnerability in Apache Struts (CVE-2017-5638), an open-source application framework that supports t
by sigmar 9y ago
>The attack vector used in this incident occurred through a vulnerability in Apache Struts (CVE-2017-5638), an open-source application framework that supports the Equifax online dispute portal web application.
https://www.equifaxsecurity2017.com https://www.equifaxsecurity2017.com
^ the official site, despite looking like a phish
There might be more to it, but this vulnerability was definitely used.
- speps 9y agoThis isn't the official site by the way. https://news.ycombinator.com/item?id=15295146 https://news.ycombinator.com/item?id=15295146
- snowwolf 9y agoNope. https://securityequifax2017.com/ https://securityequifax2017.com/ is the site referenced in your linked article https://www.equifaxsecurity2017.com/ https://www.equifaxsecurity2017.com/ is the official site