Bloomberg News reports:
Hackers compromised the Federal Bureau of Investigation’s external email system on Saturday. The hackers sent out tens of thousands of emails from an FBI email account warning about a possible cyberattack, according to the Spamhaus Project, which tracks spam and related cyber threats.
The FBI said it, along with the Cybersecurity and Infrastructure Security Agency, is “aware of the incident this morning involving fake emails from an @ic.fbi.gov email account.” “This is an ongoing situation and we are not able to provide any additional information at this time,” the FBI said in a statement.
Read the full article.
We have been made aware of “scary” emails sent in the last few hours that purport to come from the FBI/DHS. While the emails are indeed being sent from infrastructure that is owned by the FBI/DHS (the LEEP portal), our research shows that these emails *are* fake.
— Spamhaus (@spamhaus) November 13, 2021
These fake warning emails are apparently being sent to addresses scraped from ARIN database. They are causing a lot of disruption because the headers are real, they really are coming from FBI infrastructure. They have no name or contact information in the .sig. Please beware!
— Spamhaus (@spamhaus) November 13, 2021
More: The hacker (we don’t know a ton about this situation, but I can’t conceive of any scenario where it’s inaccurate to call the perpetrator here a hacker) signed the emails as DHS’s Security’s Cyber Threat Detection and Analysis Group, which hasn’t existed for several years.
— Kevin Collier (@kevincollier) November 13, 2021
Worth noting we have absolutely no idea what the goal was here. It truly might just be for lulz, but you really have to wonder how worth it that might be, given this person now has a lifelong FBI target on their back. Or maybe it’s a distraction for another operation.
— Kevin Collier (@kevincollier) November 13, 2021
And this is new: The FBI’s updated statement refers to “impacted hardware,” indicating that the perpetrator indeed got into FBI infrastructure.https://t.co/SHZY7AM414 pic.twitter.com/hzPiZUBCJh
— Kevin Collier (@kevincollier) November 13, 2021