AP

Hacker claims breach of FBI’s critical-infrastructure portal

Dec 14, 2022, 3:04 PM | Updated: Dec 15, 2022, 8:10 am

BOSTON (AP) — A hacker who reportedly posed as the CEO of a financial institution claims to have obtained access to the more than 80,000-member database of InfraGard, an FBI-run outreach program that shares sensitive information on national security and cybersecurity threats with public officials and private sector actors who run U.S. critical infrastructure.

The hacker posted samples they said were from the database to an online forum popular with cybercriminals last weekend and said they were asking $50,000 for the entire database.

The hacker obtained access to InfraGard’s online portal by posing as the CEO of a financial institution, they told independent cybersecurity journalist Brian Krebs, who broke the story. They called the vetting process surprisingly lax.

The FBI declined to comment. Krebs reported that the agency told him it was aware of a potential false account and was looking into the matter.

InfraGard’s memberhip is a veritable critical infrastructure Who’s Who. It includes business leaders, IT professionals, military, state and local law enforcement and government officials involved in overseeing the safety of everything from the electrical grid and transportation, to health care, pipelines, nuclear reactors, the defense industry, dams and water plants and financial services. Founded in 1996, it is the FBI’s largest public-private partnership, with local alliances affiliated with all its field offices. It regularly shares threat advisories from the FBI and the Department of Homeland Security and serves as a behind-closed-doors social media site for select insiders.

The database has the names, affiliations and contact information for tens of thousands of InfraGard users. Krebs first reported its theft on Tuesday.

The hacker, going by the username USDoD on the BreachForums site, said on the site that records of only 47,000 of the forum’s members’ — slightly more than half — include unique emails. The hacker also posted that the data contained neither Social Security numbers nor dates of birth. Although fields existed in the database for that information, InfraGard’s security-conscious users had left them blank.

However, the hacker told Krebs that they had been messaging InfraGard members, posing as the financial institution’s CEO, to try to obtain more personal data that could be criminally weaponized.

The AP reached the hacker on the BreachForums site via private message. They would not say whether they had found a buyer for the stolen records or answer other questions. But they did say that Krebs’ article “was 100% accurate.”

The FBI did not offer an explanation for how the hacker was able to trick it into approving the InfraGard membership. Krebs reported that the hacker had included a contact email address that they controlled — as well as the CEO’s real mobile phone number — when applying for InfraGard membership in November.

Krebs quoted the hacker as saying InfraGard approved the application in early December and that they were able to use the email to receive a one-time authentication code.

Once inside, the hacker said, the database information was easy to obtain with a simple software script.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

Most Americans are sleepy new Gallup poll finds...

Associated Press

Most Americans say they don’t get enough sleep, according to new Gallup poll

A new Gallup poll found that most Americans are sleepy — or, at least, they say they are. Multiple factors play into this.

2 days ago

Near-total abortion ban in Arizona dates back to Civil War era...

Associated Press

Near-total abortion ban dates back to 1864, during the Civil War, before Arizona was a state

The near-total abortion ban resurrected last week by the Arizona Supreme Court dates to 1864, when settlers were encroaching on tribal lands.

2 days ago

Tracy Toulou...

Associated Press

How to tackle crime in Indian Country? Empower tribal justice, ex-Justice Department official says

A recently retired director of the Justice Dept. says the federal government hasn't given tribal justice systems equal recognition.

3 days ago

Speaker of the House Mike Johnson...

Associated Press

House Speaker Mike Johnson says he will push for aid to Israel and Ukraine this week

House Speaker Mike Johnson said Sunday he will try to advance wartime aid for Israel this week, along with funding for Ukraine.

3 days ago

President Joe Biden speaks at a campaign rally Saturday, March 9, 2024, at Pullman Yards in Atlanta...

Associated Press

US shoots down ‘nearly all’ Iran-launched attack drones as Biden vows support for Israel’s defense

Joe Biden cut short a weekend stay at his beach house to meet with his national security team as Iran launched an attack against Israel.

4 days ago

Protesters in Phoenix shout as they join thousands marching around the Arizona state Capitol after ...

Associated Press

Abortion ruling supercharges Arizona to be an especially important swing state

A ruling this week instituting a near-total abortion ban supercharged Arizona's role, turning it into the most critical battleground.

5 days ago

Sponsored Articles

...

Day & Night Air Conditioning, Heating and Plumbing

Day & Night is looking for the oldest AC in the Valley

Does your air conditioner make weird noises or a burning smell when it starts? If so, you may be due for an AC unit replacement.

...

Fiesta Bowl Foundation

The 51st annual Vrbo Fiesta Bowl Parade is excitingly upon us

The 51st annual Vrbo Fiesta Bowl Parade presented by Lerner & Rowe is upon us! The attraction honors Arizona and the history of the game.

...

Collins Comfort Masters

Avoid a potential emergency and get your home’s heating and furnace safety checked

With the weather getting colder throughout the Valley, the best time to make sure your heating is all up to date is now. 

Hacker claims breach of FBI’s critical-infrastructure portal