{"id":24031,"date":"2022-12-16T16:48:34","date_gmt":"2022-12-16T16:48:34","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/16\/hacker-infiltrates-fbi-portal-lists-details-of-87000-users-for-sale\/"},"modified":"2022-12-16T16:48:34","modified_gmt":"2022-12-16T16:48:34","slug":"hacker-infiltrates-fbi-portal-lists-details-of-87000-users-for-sale","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/16\/hacker-infiltrates-fbi-portal-lists-details-of-87000-users-for-sale\/","title":{"rendered":"Hacker Infiltrates FBI Portal, Lists Details of 87,000 Users for Sale"},"content":{"rendered":"

<\/a>\n<\/p>\n

This site may earn affiliate commissions from the links on this page. Terms of use<\/a>.<\/div>\n
\n
\n
\n\"\" <\/div>\n<\/div>\n

(Photo: Shahadat Rahman\/Unsplash)<\/small><\/center>Hackers have exploited a security loophole within one of the FBI\u2019s databases, resulting in tens of thousands of \u201chigh profile\u201d individuals\u2019 contact details being listed for sale on the dark web. The breach was discovered Wednesday after the infiltrators had already placed a $50,000 price tag on the stolen information.<\/p>\n

KrebsOnSecurity, a security-focused news outlet, first identified<\/a> the misdeed when it encountered a post on the cybercrime forum Breached. The post claims to offer the entirety of the FBI\u2019s InfraGard for a \u201cstarting\u201d price of $50,000 USD. \u201cThis will be sold one time only,\u201d mysteriously writes the original poster, who goes by USDoD. \u201cI like to conduct my business the same way that I conduct my life.\u201d<\/p>\n

InfraGard is a portal in which members of the FBI can communicate with \u201cbusiness executives, entrepreneurs, lawyers, security personnel, military and government officials, IT professionals, academia and state and local law enforcement.\u201d According to the Infragard homepage<\/a>, the portal is mainly used for information sharing and for education surrounding emerging threats. But in order to collaborate there, you have to have an Infragard profile\u2014and the FBI\u2019s own lack of robust security has made these profiles ripe for exploitation.<\/p>\n

\"\"<\/p>\n

(Screenshot: KremsOnSecurity)<\/p>\n<\/div>\n

Apparently, InfraGard doesn\u2019t have very stringent verification guidelines for new profile requests. \u201cUSDoD\u201d is said to have simply used a real financial CEO\u2019s details to apply for an account, then waited less than a month for approval. Once the hacker was in, they used a Python script to query InfraGard\u2019s API, extracting 87,000 users\u2019 contact information in the process. The CEO whose identity was stolen says the FBI never contacted him prior to the breach, meaning the allegedly \u201cexclusive\u201d InfraGard portal is so lax in its verification measures that it\u2019s a wonder this didn\u2019t happen sooner.<\/p>\n

USDoD says their asking price may appear a bit high given some users\u2019 email addresses, Social Security numbers, and dates of birth are missing from the list. The $50k asking price was supposedly a negotiation starter and not a final offer, according to a follow-up comment on the original post. USDoD says the sale, should they find an appropriate buyer, would be facilitated via the Breached administrator who goes by \u201cPompompurin.\u201d<\/p>\n

The FBI confirmed the breach earlier this week but has declined to publicly comment on the matter, saying only that the situation is \u201congoing.\u201d<\/p>\n

Now Read:<\/b><\/p>\n<\/p><\/div>\n