Thoughts on this ID.me nonsense from #infragard? I'm not loving the idea of providing a private organization with no practical liability who is dependent on the US government for most of its income my most sensitive details. I liked the info I got from infragard, but not *that* much. #privacy #infosec #cybersecurity.
#infragard #privacy #infosec #cybersecurity
「FBIの精査された情報共有ネットワーク「InfraGard」がハッキングされる 」: KrebsonSecurity
「InfraGardは重要インフラの所有者、運営者、利害関係者をFBIと結び付け、セキュリティの脅威とリスクに関する教育、ネットワーキング、情報共有を提供している」
「悪党USDoDによると、彼らはInfraGard会員資格を付与される可能性が高い企業の最高経営責任者の名前、社会保障番号、生年月日、その他の個人情報を使用して新しいアカウントを申請し、FBIのInfraGardシステムにアクセスしたという」
FBIのInfraGardと言うシステムを破壊した。
注:Krebsさんは世界で初めてMirai型マルウェアのDDoSの猛攻を受けた人でセキュリティ専門家。
#prattohome #krebsonsecurity #fbi #infragard
@jamiesaker
At the deadline for renewal, I debate whether to re-apply to #Infragard. They haven't handled this breach/disclosure well. They haven't implemented improved identity validation with TOTP or FIDO2 that the community has been requesting. And the new vetting process exposes my PII to yet another private company. The risk/reward balance is not tipping in their favor.
I guess I could read about the updates to the #InfraGard account hack situation...
... but I do not care to know right now :blobtea:
Just received this #InfraGard email which definitely looks like a #phishing mail. What an absolute terrible email with so many red flags
- The email was labeled as Spam by Gmail
- There is no space in the subject line "RecertificationInvitation"
- Sense of urgency "If you do not update our account information by 03/15 your InfraGard account will be disabled and your InfraGard membership will be rescinded"
- Vague signature "Thank you, The InfraGard Program Office"
I miss the infragard portal... anyone know if it'll ever come back?
#infragard #threatintel
We can confirm that the #InfraGard database is also circulating on several Russian cybercrime forums and #Telegram groups.
#leaks #CyberAttack #Hacking #FBI #Security #Telegram #infragard
We can confirm that the #InfraGard database is also circulating on several Russian cybercrime forums and #Telegram groups.
#leaks #CyberAttack #Hacking #FBI #Security #Telegram #infragard
Schwachstellen bei #Citrix und #Fortinet, FBI Programm #InfraGard gehackt, Uni Duisburg erneut angegriffen, #Europol Operation #PowerOff erfolgreich, #Twitter Mitarbeiter verurteilt und Datenpanne in der JVA Straubing. Das sind die Infosec News der Woche.
#citrix #fortinet #infragard #europol #poweroff #twitter
Hacker Halts Sale of #FBI's High-Profile #InfraGard Database
The InfraGard database containing the personal details of 87,000 members was initially being sold for $50,000 on a cybercrime and hacking forum.
https://bit.ly/3WbpPxV
#InfraGard "Cybercriminals accessed your data"
Also Infragard: "Open this PDF attachment to learn more."
Die #Infosec #News der Woche, heute mit #Schwachstellen in #Fortigate und #Citrix, Angriffe auf #InfraGard (FBI) und Uni Duisburg (erneut!), Europol schaltet #DDoS Sites ab, Urteil für ehem. #Twitter Mitarbeiter und #Datenpanne in Justizvollzugsanstalt.
https://www.lastbreach.de/blog/die-infosec-news-der-woche-221218
#infosec #news #schwachstellen #fortigate #citrix #infragard #ddos #twitter #datenpanne
FBI data on offer, apparently. I haven't dug much into this story yet, but I'm definitely curious about the details of the breach! Going to investigate this for sure.
This data would be gold to APT or other threat actors trying to identify worthwhile targets....
#breach #infragard #FBI
https://www.darkreading.com/attacks-breaches/stolen-data-on-80k-members-of-fbi-run-infragard-reportedly-for-sale-on-dark-web-forum
Hacker claims breach of FBI’s critical-infrastructure portal
A hacker who posed as the CEO of a financial institution claims to have obtained access to the more than 80,000-member database of InfraGard, an FBI outreach program that shares sensitive information on national security and cybersecurity threats with public officials and private sector actors who run U.S. critical infrastructure
#InfraGard #FBI #databreach #security #cybersecurity #hackers #hacking #hacked
#infragard #fbi #databreach #security #cybersecurity #hackers #hacking #hacked
Meiiiiine Fress......
"FBI-Daten hochrangiger Verantwortlicher für Kritische Infrastrukturen geklaut."
Und das mit einfachem #Identitätsdiebstahl.
#Cybercrime #Datenklau #FBI #KRITIS #Security #InfraGard #Darknet
#Darknet #infragard #security #kritis #FBI #Datenklau #cybercrime #identitatsdiebstahl
Ein #Hacker will sich Zugang zu einem vom #FBI betriebenen Online-Portal zum Schutz der kritischen Infrastruktur der #USA verschafft haben. Der Eindringling habe vergangene Woche einige Informationen aus der Datenbank #InfraGard in einem Internetforum gepostet, das bei Cyberkriminellen populär sei, berichtete der auf #Cybersicherheit spezialisierte Journalist Brian #Krebs. Der Hacker verlange 50.000 Dollar (rund 47.000 Euro) für die gesamte Datenbank.
#Krebs #Cybersicherheit #infragard #USA #FBI #hacker
#Database of the #FBI's #InfraGard US Critical Infrastructure Intelligence Portal available for sale
https://securityaffairs.co/wordpress/139682/data-breach/fbi-infragard-us-critical-infrastructure-intelligence-hacked.html
#securityaffairs #hacking #cybercrime
#database #fbi #infragard #securityaffairs #hacking #cybercrime
Hacker claims breach of FBI's critical-infrastructure forum | Stars and Stripes https://www.stripes.com/theaters/us/2022-12-14/hacker-claims-breach-fbi-infragard-8422644.html
#InfraGard