So it is true
I asked the FBI for comment. Here's what they said: "The FBI and CISA are aware of the incident this morning involving fake emails from an @ic.fbi.gov email account. This is an ongoing situation and we are not able to provide any additional information at this time."https://twitter.com/briankrebs/status/1459523630996598790 …
-
-
Thanks. Twitter will use this info to make your timeline better. UndoUndo
-
-
-
I didn't understand, they can't decrypt the message or something else?
- Show replies
New conversation -
-
I'm thinking out lout here, but now that we know the FBI uses a cjis tld internally could someone craft an autodiscover.cjis style attack if a FBI employee was using a laptop on public Wi-Fi?
- End of conversation
New conversation -
-
-
"ic" in a gov/mil subdomain typically refers to *the* IC, aka the Intelligence Community
- Show replies
New conversation -
-
-
Injected headers or did the legit pass SPF & DKIM
Thanks. Twitter will use this info to make your timeline better. UndoUndo
-
-
-
This is why I spent so much effort locking down
@cloudsa email via spf and dkim to a handful of trusted providers and keep a very close eye on it to catch any weirdness. Email is the one push protocol we have, treat it like the special magical thing it is.Thanks. Twitter will use this info to make your timeline better. UndoUndo
-
-
-
This Tweet is unavailable.
- Show replies
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.