黑客组织ShinyHunters宣称成功入侵FBI多个相关服务，并窃取了所有FBI员工和申请人的数据1。该组织表示掌握的信息包括员工姓名、家庭地址、电话号码、出生日期以及配偶信息1，其中样本数据涵盖5000名FBI员工的个人信息1。ShinyHunters声称："我们入侵了FBI，掌握了所有FBI员工和申请人的数据"1。
这次入侵利用了Oracle PeopleSoft产品中的零日漏洞，黑客通过该漏洞获取了AWS GovCloud服务器的访问权限，进而下载了数据1。被窃取的数据总量估计在2至3TB之间1。黑客组织在周一晚间实施了攻击，随后于周二篡改了FBI招聘网站1。FBI招聘网站随即显示提示："Apply.fbijobs.gov和特别探员申请人门户网站目前不可用"1。
对于此次行动的动机，ShinyHunters的代表表示这并非出于经济目的1。
The hacking group ShinyHunters announced that it has infiltrated multiple FBI-related services and obtained personal information on all FBI employees and applicants 1. According to the group's statement, they declared: "We hacked the FBI. We hold data on all FBI employees and applicants." 1
The stolen data encompasses names, home addresses, phone numbers, dates of birth, and spouse information of FBI personnel 1. A sample of the breach contained personal records for approximately 5,000 FBI employees 1. The hackers exploited a zero-day vulnerability in Oracle PeopleSoft software to gain access to AWS GovCloud servers, from which they downloaded between 2 and 3 terabytes of data 1. The attack occurred on Monday evening, followed by the group's defacement of the FBI recruitment website on Tuesday 1. The compromised recruitment portal displayed a message stating: "Apply.fbijobs.gov and the Special Agent Applicant Portal are currently unavailable." 1
ShinyHunters emphasized that the breach was not financially motivated, as a group representative stated: "This is not financially motivated." 1
评论
还没有评论，欢迎留下第一条。