<p>The ShinyHunters cybercriminal group claims it has stolen sensitive information about FBI employees and job applicants and is demanding that the bureau retract a public warning about its tactics within a week.</p>
Introduction to Malware Binary Triage (IMBT) Course
Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.
Enroll Now and Save 10%: Coupon Code MWNEWS10
Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.
<p>The demand, addressed to FBI Director Kash Patel and Cyber Division Assistant Director Brett Leatherman, seeks to pressure the agency into changing its public account of the group’s activities. The group claims the effort was not financially motivated.</p>
<p>In a statement attributed to the group, the hackers claimed access to several FBI services, including human resources systems and a service identified as Medlink. </p>
<p>“We have compromised the FBI. We hold very sensitive data on almost ALL FBI Agents and individuals who filed an application with the FBI for a job,” the <a href=“Dark Web Informer on X: "‼️ ShinyHunters has shared a message on their pay or leak portal to Director Brett Leatherman of the FBI Cyber Division and Director Kash Patel of the FBI: "Dear Assistant Director Brett Leatherman of the FBI Cyber Division & Director Kash Patel of the FBI, During Quarte… / X”>statement says</a>.</p>
<p>An FBI jobs page also displayed a “Scheduled Maintenance Underway” notice Tuesday, saying the site was temporarily unavailable. The notice did not identify a security incident or explain whether the outage was related to the hackers’ claims. An earlier version of the webpage appears to show a <a href=“kevops on X: "shinyhunters have announced themselves on the fbi jobs website💀 https://t.co/wRAK7k960I" / X”>seizure notice</a> posted by the group.</p>
<p>The language ShinyHunters wants removed appears in a<a href=“Internet Crime Complaint Center (IC3) | ShinyHunters: Cyber Criminal Group Attacks Learning Management System”> May 15 FBI public service announcement</a> issued after an attack disrupted an online learning management system used by educational institutions. </p>
<p>In the announcement, the FBI warned that ShinyHunters uses harassment to pressure victims, including threatening communications to victims and family members and, in some cases, swatting, the practice of calling in false emergency reports intended to trigger an armed police response at someone’s home. The alert also warned that attackers may exaggerate their access to personal information or falsely claim to possess compromising photographs or videos.</p>
<p>ShinyHunters denied those practices in its statement and gave the bureau one week to correct or remove the warning. </p>
<p>An FBI spokesperson did not immediately return a phone call or an email requesting comment on the demands. <em>Nextgov/FCW</em> has also reached out to the FBI Agents Association, which advocates on behalf of active and retired FBI special agents.</p>
<p>If the claimed employee records are authentic, their exposure could give criminals or foreign intelligence services information useful for identifying, contacting or intimidating FBI personnel and their families.</p>
<p>The claims come as the FBI works to pursue a more coordinated campaign focused on dismantling hackers’ infrastructure and arresting cybercrime operatives. Its <a href=“New FBI cyber strategy seeks faster action against hackers, larger industry role - Nextgov/FCW”>new cyber strategy</a> released this month in part emphasizes disrupting criminal hackers even when those responsible remain beyond the immediate reach of U.S. law enforcement.</p>
<p>404 Media <a href=“‘We Hacked the FBI:’ Hackers Say They Have Data on All FBI Employees”>reported earlier Tuesday</a> that a ShinyHunters representative provided the news outlet a file appearing to contain information on roughly 5,000 FBI employees, including names, addresses, phone numbers, birth dates and, in some cases, details about their spouses.</p>
<p>A representative told the outlet that the hackers gained access Monday night through what they described as a previously unknown vulnerability in Oracle’s PeopleSoft software, then accessed servers in Amazon Web Services’ GovCloud environment. The representative claimed the group took between two and three terabytes of data.</p>
<p>The account of the intrusion has not been independently verified. <em>Nextgov/FCW</em> has asked Oracle and AWS for comment.</p>
Article Link: ShinyHunters claims FBI data theft, demands bureau retract cyber warning - Nextgov/FCW