Bahama Times

Friday, Jan 27, 2023

Hacker claims breach of FBI’s critical-infrastructure portal

Hacker claims breach of FBI’s critical-infrastructure portal

A hacker who reportedly posed as the CEO of a financial institution claims to have obtained access to the more than 80,000-member database of InfraGard, an FBI-run outreach program that shares sensitive information on national security and cybersecurity threats with public officials and private sector actors who run US critical infrastructure.
The hacker posted samples they said were from the database to an online forum popular with cybercriminals last weekend and said they were asking $50,000 for the entire database.

The hacker obtained access to InfraGard’s online portal by posing as the CEO of a financial institution, they told independent cybersecurity journalist Brian Krebs, who broke the story. They called the vetting process surprisingly lax.

The FBI declined to comment. Krebs reported that the agency told him it was aware of a potential false account and was looking into the matter.

InfraGard’s memberhip is a veritable critical infrastructure Who’s Who. It includes business leaders, IT professionals, military, state and local law enforcement and government officials involved in overseeing the safety of everything from the electrical grid and transportation, to health care, pipelines, nuclear reactors, the defense industry, dams and water plants and financial services. Founded in 1996, it is the FBI’s largest public-private partnership, with local alliances affiliated with all its field offices. It regularly shares threat adviseries from the FBI and the Department of Homeland Security and serves as a behind-closed-doors social media site for select insiders.

The database has the names, affiliations and contact information for tens of thousands of InfraGard users. Krebs first reported its theft on Tuesday.

The hacker, going by the username USDoD on the BreachForums site, said on the site that records of only 47,000 of the forum’s members’ — slightly more than half — include unique emails. The hacker also posted that the data contained neither Social Security numbers nor dates of birth. Although fields existed in the database for that information, InfraGard’s security-conscious users had left them blank.

However, the hacker told Krebs that they had been messaging InfraGard members, posing as the financial institution’s CEO, to try to obtain more personal data that could be criminally weaponized.

The AP reached the hacker on the BreachForums site via private message. They would not say whether they had found a buyer for the stolen records or answer other questions. But they did say that Krebs’ article “was 100 percent accurate.”

The FBI did not offer an explanation for how the hacker was able to trick it into approving the InfraGard membership. Krebs reported that the hacker had included a contact email address that they controlled — as well as the CEO’s real mobile phone number — when applying for InfraGard membership in November.

Krebs quoted the hacker as saying InfraGard approved the application in early December and that they were able to use the email to receive a one-time authentication code.

Once inside, the hacker said, the database information was easy to obtain with a simple software script.
Newsletter

Related Articles

Bahama Times
Close
0:00
0:00
Tesla reported record profits and record revenues for 2022
Prince Andrew and Virginia Giuffre Photo Is Fake: Ghislaine Maxwell
Opinion | Israel’s Supreme Court Claims a Veto on Democracy
Moonwalker Buzz Aldrin Gets Married On His 93rd Birthday
Who’s Threatening Israeli Democracy?
Federal Reserve Probes Goldman’s Consumer Business
China's first population drop in six decades
Microsoft is finalising plans to become the latest technology giant to reduce its workforce during a global economic slowdown
China's foreign ministry branch in Hong Kong urges British gov't to stop the biased and double standards Hong Kong report
Tesla slashes prices globally by as much as 20 percent
1.4 Million Copies Of Prince Harry's Memoir 'Spare' Sold On 1st Day In UK
After Failing To Pay Office Rent, Twitter May Sell User Names
Lisa Marie Presley, singer and daughter of Elvis, dies aged 54
FIFA president questioned by prosecutors
Britain's Sunak breaks silence and admits using private healthcare
Hype and backlash as Harry's memoir goes on sale. Unnamed royal source says prince 'kidnapped by cult of psychotherapy and Meghan'
Saudi Arabia set to overtake India as fastest-growing major economy this year 
Google and Facebook’s dominance in digital ads challenged by rapid ascent of Amazon and TikTok
FTX fraud investigators are digging deeper into Sam Bankman-Fried's inner circle – and reportedly have ex-engineer Nishad Singh in their sights
TikTok CEO Plans to Meet European Union Regulators
UK chaos: Hong Kong emigrants duped by false prospectus
France has banned the online sale of paracetamol until February, citing ongoing supply issues
Japan reportedly to give families 1 million yen per child to move out of Tokyo
Will Canada ever become a real democracy?
Hong Kong property brokerages slash payrolls in choppy market
U.S. Moves to Seize Robinhood Shares, Silvergate Accounts Tied to FTX
Effect of EU sanctions on Moscow is ‘less than zero’ – Belgian MEP
Coinbase to Pay $100 Million in Settlement With New York Regulator
FTX assets worth $3.5bn held by Bahamas securities regulator
A Republican congressman-elect is under investigation in New York after he admitted he lied about his education and work experience.
Brazilian football legend Pele, arguably the greatest player ever, has died at the age of 82.
Hong Kong to scrap almost all its Covid rules
EU calls screening of travellers from China unjustified
US imposes Covid testing for visitors from China
Ukraine President Volodymyr Zelenskyy Addresses Joint Session of Congress - FULL SPEECH
If a country is denied the right to independence by another, it is not in a union. It is in a dictatorship.
Where is Rishi? Chancellor Jeremy Hunt's excuses about the UK's economic challenges just don't make sense
Former FTX CEO Bankman-Fried finally arrested in Bahamas after U.S. files charges
Corruption works: House Financial Services Chair Waters doesn't plan to subpoena her donor, Sam Bankman-Fried, to testify at hearing on FTX collapse
Ronaldo's new contract...
Prince William's godmother resigns honorary royal role after exposing her/their racism
British PM Rishi Sunak pledges further action on strikes to 'protect lives'
Tax fraud verdict again exposes illusion of Trump the master businessman
Tax fraud verdict again exposes illusion of Trump the master businessman.
Double standards: UK lawmakers attack EU chief over Ireland claims
Yellen hints at ‘national security’ probe into Twitter purchase
Elon Musk reinstates Donald Trump's Twitter account.
George W. Bush and Barack Obama will hold back-to-back disinformation conferences
Mission Improbable: Tom Cruise & Queen Elizabeth
Miss Argentina and Miss Puerto Rico are not single anymore
×