I received this today at my work email address. Is anyone aware of a phishing scam? I am unable to find anything online (yet).

November 08, 2011
Re: 000012-91273771
Dear, Dolly
Thank you for your request for a credit report. Please find it in the attachment.
* If you feel you have additional information you wish to submit to us that might influence our decision, feel free to write to us at the address listed at the bottom of this letter. Please include the reference number on any correspondence.
Equifax Corporation
P.O. Box 740241
Atlanta GA 75013-0036
1-800-685-1111

I just got the same thing. I am going to forward it to our Equifax/CSC account rep. The e-mail address also looks very strange.

Note: I did not open the attachment.

I got one also, but since I had applied for credit through Toyota yesterday I thought it might be legitimate; however I contacted the dealer and they didn't know anything about it <I had given them my work e-mail address yesterday>. I deleted the e-mail without opening.

I received one at my business email. Spam! I wouldn't open the attachment on a bet.

The letter doesn't even make sense...if you have any additional information that would influence our decision? What decision? It says I ordered a credit report, which I did not.

I received it also - sent it to my spam folder. The email address didn't look right and I knew I didn't order a credit report.

It has been confirmed by Equifax as a phishing attempt. Some of us here at BOL got those &*%$ emails, too.

Aren't we special....... Are they attacking bankers?! LOL!

As Willy Sutton used to say, "That's where the money is"! Oh, that was about BANKS, not BANKERs. Never mind.

I received one too at work! And it used my first name, which I never use!

The sender obviously had a list from somewhere. hmmm, I wonder if it was related to the FinCen email problem?

I was actually thinking the same thing. These people had information that is not widely available. I had several clients receive these also. What's the hook?? Embedded virus? What was the phish? Is the phone number listed not Equifax??? Something seems very strange.

I was very suspicious when I opened the message. There aren't many places where I use my work email address. That's why I posted the message here.

I also find it very interesting that so many of us have received the same message. I called the number. It was Eqifax's automated ordering system. I agree that it is very strange.

What I found odd was that my report was pulled the day before at the Toyota dealer and I had given them my e-mail address at work. I spoke with the financing guy last night and he also thought it was very unusual - like the spammers have a link to Equifax or something.

Even, if Equifax was hacked, I still can't figure out the angle on the e-mail. If they were phishing, where is the hook? One client got one a week or so ago and another got one this week, There was an actual credit report attached to the e-mail, I wonder if it was the same one for everyone. I don't specifically remember the name.

I have been afraid to open the attachment. It passed a virus check but I don't want to take a chance.

Perhaps it is just someone showing what they can do - their version of fun.

The message was caught by me Bank's front end virus protection software:

This recipient alert message is generated by PureMessage because it has encountered the following events.

Event(s): Virus infection detected
Message action: Message deleted
Message ID:<20cf300513a825fe7e04b13b6971@google.com>
Subject: Re: 000012-91273771
Sender: "Equifax" <report@fin-report.com>
Recipient(s): <dave@fmbanking.com>
Date: 11/8/2011
Time: 10:11:09
Job: Transport (SMTP) scanning
Server: FMBEXCH
============================================================
Incident information:

Event: Virus infection detected
Location: equifaxreport.pdf
Replaced with text: No
Virus name(s): Mal/PDFJs-RE,Sus/PDFJs-RE ============================================================

We had this one received today, assuming it's also spam/phishing:

From: Christi_Mickelson [mailto:Creditscore@sabadiaff.com]
Sent: Wednesday, November 09, 2011 5:52 AM
To:
Subject: [SPAM] Notice: There has been a change to your Transunion score
Importance: Low



November 8th 2011,
Newsletters about Experian and Equifax reports.

Unlimited Experian Reports [Originally contained a link here]

Verify all three scoring systems. [Originally contained a link here]

Ski,

My IT guy asked me to ask you what version of PDF Reader and what version of Java you are using.

We got the same email yesterday, but are not detecting any virus.

I received this email yesterday as well and had IT scan it - said that it contained some type of virus that would exploit outdated Adobe PDF Readers and possibly infect them. Glad I didnt open the attachment!

This is a confirmed virus. We received the same email yesterday and today. We submitted the attachment to virustotal.com. As of now, Nov 9, only 11 of the 42 scanners detected it. The IT staff here are trying to determine what it actually does and what files it drops. This is an Adobe PDF exploit and trojan.

If you can block that email address with your spam filter, I would.

And just don't ever open anything that you weren't expecting not from a known contact. And if it looks like a known contact hover over the address link to see if it is really their address!

Did any of you happen to notice that the alleged credit report attached had an Experian (not Equifax) logo?

I did not open it!

<---- did not open it either!

Yep, mine did too.

The only reason I opened it was because the day before I had been in our LOS system and accidentally clicked "order credit report" in the file I was in. I don't have the authority to do it so it blocked me, but the timing of this email made me think it did go through which obviously brought out other concerns! We don't even order through Equifax but it was such a coincidence I didn't even think about it.