It appears that an unknown hacker, or perhaps even a hacking group, has infiltrated Equifax's email system. This attacker sent out emails with the enticing subject line "Free Pompompurin.".
See also: CISA: Immediately fix Zimbra bug used in attacks
The FBI recently arrested Conor Brian FitzPatrick, also known as Pompompurin, for allegedly organizing the cybercrime forum Breached.
On April 3, numerous screenshots were released on social networking sites, such as Twitter and Telegram, which purportedly came from the famous American credit reporting agency Equifax.
The email was titled “Free Pompompurin.” Pompompurin, whose real name is Conor Brian FitzPatrick, is an alleged American cybercriminal who was recently arrested as the mastermind behind an underground hacking forum.
See also: Lumen hit by 2 separate cyberattacks
This purported email is allegedly seeking to trick people into transferring cryptocurrency directly to the wallets of unscrupulous hackers.
The email states that if you choose to send cryptocurrency to the specified wallet, then the cryptocurrency will be doubled and sent back as a reward.
Take a look at this screenshot of the alleged email header:
This is the body of the email:
If the emails are authentic, it appears that someone managed to gain access to Equifax's email system.
Coincidentally, Pompompurin – the suspected cybercriminal – achieved this feat a year ago. He managed to gain access to the FBI’s email system and sent fraudulent emails to 100,000 people.
See also: ALPHV Ransomware Affiliate targets vulnerable backup installations to gain initial access
Who is Pompompurin?
The FBI has arrested 20-year-old Conor Brian FitzPatrick, better known as Pompompurin, for his involvement in the defunct cybercrime forum Breached.vc.
As of March 2022, BreachedForums is the leading source for buying and trading illegally obtained data. This includes leaked databases from companies, government agencies , and private individuals' confidential information .
Pompompurin allegedly orchestrated and facilitated malicious activities, such as the sale of illegally obtained confidential information and even hacking.
In 2021, reports emerged claiming that Pompompurin had infiltrated the FBI's email system and sent false messages to approximately 100,000 recipients.
After the incident, he became a major target of the FBI, ultimately resulting in his arrest in March 2023.
Who exactly is responsible for the alleged attack on Equifax remains a mystery.
Information source: privacyaffairs.com
