What the...??? DO NOT EVER ENTER SS# IN ANY POP UP...EVER! ! ! Credit Report ??

Maqune

The pop-up screen-shot below appeared on our Quicken Classic Deluxe. I just installed a manual update due to previous pop-ups that didn't look legit.

Is this really Quicken? Or have we been hacked? If hacked then Quicken R55.15 has vulnerabilities.

It would be utter foolishness for anyone to enter all the info requested on any pop-up, you would be giving your life away to hackers. If this is a legit Quicken pop-up, SHAME on Quicken for even trying to entice customers to do something so foolish. Even if this pop-up was safe you shouldn't be normalizing this behavior…and even if it is currently safe, EVERY business WILL get hacked eventually so the less one spreads their personal ID info around the better!

splasher

How else would you have them retrieve your credit score?

Now, I don't know why folks wanted Quicken to retrieve their credit score to begin with since it seems like every financial institution provides it. I know that I can get it from four different FIs that I deal with.

I have always thought it was one of the more useless features they have recently added. I guess it was something new to dangle in front of users as an incentive to buy Quicken.

NotACPA

And why do you believe that a pop-up carries more risk than inputting the SSN into the primary screen?

Either can be hacked.

Maqune

#NotACPA - Technically true, anything can be hacked if info is valuable enough for hackers to spend their time getting into it - and financial programs would certainly be a prime target. My point was that on a primary screen you have a better chance to know why & where you are because you navigated there yourself without outside influence.

With pop-ups there is no way to tell where they originated from or what triggered them. A pop-up introduces more unknowns out of user control and is often used in phishing schemes. It a favorite social engineering method hackers use to coerce people into revealing the personal data allowing them to hack into primary programs. There is constant internet safety warnings about how bad players are making emails, web pages & pop-ups look more and more legitimate so never click on something you did not specifically know its origin, always go to a known source.

…and yes I wear my tin foil hat proudly…😜

Beyond my hard earned suspicious nature, I think this is a cheesy pitch that makes Quicken look like they are grasping for something instead of a solid organization I want to entrust my extremely personal data with.

Chris_QPW

I think this is a cheesy pitch that makes Quicken look like they are grasping for something instead of a solid organization I want to entrust my extremely personal data with.

What makes you think that Quicken Inc is pushing this?

Well, I guess, "sort of" because it is now a feature, but the request to see the credit score in Quicken has definitely come from Quicken users. Like the others in this thread, think that isn't the brightest idea, but it is what the Quicken users wanted.

mshiggins

You probably don’t want to know where your account and transaction data is stored either.

QuickUserPSP

@Maqune - the product is not being forced upon you. If decide to use it or not is totally up to you. The fact that Quicken offers this product doesn't imply anything, except maybe complying with users' requests for new features.

Ps56k2

then don't click on the REPORT -

Maqune

https://community.quicken.com/discussion/comment/20425012#Comment_20425012

…I'm sure you are correct. My data is probably floating around in some cloud that will definitely be hacked some day. That is why I would prefer to buy a product that resides on my own equipment.

https://community.quicken.com/discussion/comment/20425054#Comment_20425054

… If Quicken is responding to user requests then I would like a locally resident product that I own instead of renting without all of the inter-connectivity and automation that only creates more vulnerabilities and makes my job more complicated. I spend more time now finding and cleaning up erroneous categories and the bloated memorized payee list than I used to spend just manually entering everything…very annoying!

https://community.quicken.com/discussion/comment/20425086#Comment_20425086

…I did NOT click on Report or Credit Score - that was my point. The pop-up was unbidden by me and came out of the blue…like other pop-ups I recently experienced while using Quicken. The two below, and others I mention on a different post : (see "Why "Enter Quicken ID Password" suddenly starts popping up with strange behaviors)

https://community.quicken.com/discussion/comment/20425504#Comment_20425504

Some appear to be normal Quicken pop-ups, and some appear to be virus related (according to other Quicken users):

Sure I can chose to ignore pop-ups, but Quicken is choosing to use the exact same method that a virus uses to entice customers to perform a dangerous action. Hackers create viruses to mimick that function to entice you to do something you DID NOT want to do…how are we to know which pop-up to trust and which to ignore? I'm just saying unbidden pop-ups are a yellow or red flag so if Quicken is using them they are hurting their reputation and encouraging customers to participate in dangerous practices. If the information given by other users on my other post is correct, then the latest version of Quicken already has a vulnerability that allowed a virus to utilize Quicken pop-up dialogs to redirect customers to perform dangerous activities.

Ps56k2

I’ve never seen ANY of these kinds of popups …

QuickUserPSP

@Maqune - what device did you capture the last two screenprints from?

Quicken Jasmine

Hello @Maqune,

Would you mind providing more information regarding the pop-ups that you receive within your Quicken Application? More specifically, the ones that you previously shared within this discussion thread.

Thanks!

Ps56k2

interesting…

If you do a Google search for - “virus press allow to verify human”

you will see tons of similar reported screen images…

QuickUserPSP

@Ps56k2 - there are also many similar images and reports on Reddit that were removed because they were fakes. Take a closer look at the images that Maqune provided. They look like they were created rather than captured.

Boatnmaniac

@Maqune - Did you run an anti-virus/malware deep scan of your computer as was suggested in your other 3/22 post on this pop-up subject (Why "Enter Quicken ID Password" suddenly starts popping up with strange behaviors)? If so, what was the result?

Are you using that CyberGhost VPN that is shown in that one pop-up? If so, did you download it recently (like shortly before this pop-up issue started) and where did you download it from?

Have you downloaded any other software (applications, games, browser add-on or extensions, etc.) and where did you download it from? You mentioned that prior to downloading/installing the manual patch update you also saw pop-ups so that's a pretty good indication that whatever is causing these popups now was already in your system before you downloaded/installed the manual patch update.

Some companies/sites will offer "free" software. They need to make money and they sometimes do that or supplement it by downloading Adwares or PUPs with the software that you thought you were getting…and they don't tell you that. There are also some companies that charge you for the software downloads that will do the same thing. Even some computer manufacturers and retailers will preload app softwares on the computers they sell with Adwares and PUPs included (and, believe me, that is intentional on their part…I know since I used to work for Dell….Dell is not alone in doing this).

In addition to running an anti-virus deep scan, you might also want to consider downloading and running Malwarebytes (from malwarebytes.com) which is a very good program for identifying and removing Adwares and PUPs. It used to be that when you first download/install Malwarebytes you would be offered a free trial of the full program which I suggest taking advantage of. Once the free trial period is over you can decide whether to subscribe to it full time, to downgrade to their free version or to uninstall the program. And, no, they do not have Adware or PUPs in their downloads.