my tweets are severely limited by my lack of understanding of what I am doing.
FBI email infrastructure has been compromised and is being used to send fake emails about fake cyberattacks to system admins right now.https://twitter.com/spamhaus/status/1459450061696417792 …
Show this thread
-
Eg this looks like a probable starting point.https://www.fbi.gov/services/cjis/leep …
Show this thread
If anybody is wondering how companies managed to think the email was real, it went out in the early hours of the morning. Your CISO and leadership team aren’t online. Incident response kicks in, RIP those on call getting the call about FBI attack notification at 2am.pic.twitter.com/0BeJClciox
-
-
The threat actor also separately messaged Brian Krebs from the FBI's Criminal Justice Information Services Division email system (spot the different subject).https://twitter.com/briankrebs/status/1459523630996598790 …
Show this thread -
Something tells me
@pompompur_in’s Twitter header image is on point.
pic.twitter.com/HxaQUXp7L8
Show this thread -
I think the FBI probably want to isolate some systems.
https://twitter.com/briankrebs/status/1459548776226594818 …Show this thread -
I just talked to a friend at an MSSP, they got battered with calls about this overnight. On the other end of the spectrum will be the SMBs panicking on Monday morning
Seriously though, probably don’t send these kind of emails if you have this level of access.Show this thread -
FBI’s Criminal Justice Information Systems LEEP portal logins are failing now.https://twitter.com/68616c/status/1459594337612828677 …
Show this thread -
FBI comment confirming. They are in IR mode basically.https://twitter.com/briankrebs/status/1459604373680627721 …
Show this thread -
I think a lot of people will be watching the public response by the FBI to this in the coming weeks. The FBI have the option to be as transparent as possible about a breach, which may aid companies in the future in their breaches.
Show this thread -
“The impacted hardware was taken offline quickly upon discovery of the issue.”https://www.fbi.gov/news/pressrel/press-releases/fbi-statement-on-incident-involving-fake-emails …
Show this thread -
.
@briankrebs interviewed the threat actor behind this (who contacted him via the FBI’s network).https://krebsonsecurity.com/2021/11/hoax-email-blast-abused-poor-coding-in-fbi-website/ …Show this thread -
Updated FBI statement. I think it’s pretty open and transparent, and a quick isolation. LEEP webapp was indeed abused. Well handled incident I think. Orgs should take note talking about it stops rumour mill stories. https://krebsonsecurity.com/2021/11/hoax-email-blast-abused-poor-coding-in-fbi-website/ …pic.twitter.com/POA3NcHOsz
Show this thread
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.