FBI email system hacked

Norrad said:
The FBI is generally a useless bunch, so not that surprising.
Click to expand...

Not so from my experience. They have a lot of checks and standards and accountability.

The hack in question was just a customer-facing noncritical server that was used to send unclassified e-mails to public recipients.
 
Aghori said:
Not so from my experience. They have a lot of checks and standards and accountability.

The hack in question was just a customer-facing noncritical server that was used to send unclassified e-mails to public recipients.
Click to expand...
My experience with them is the complete opposite. They move at an absolutely glacial pace and completely bungled an investigation that I handed to them on a plate. The only thing that got them off their asses was when I got the media involved after nearly a year of me giving them exact locations on where the guy was staying for weeks on end. But they did take all the credit in the end though :ROFL:
 
The emails came with the subject line: “Urgent: threat actor in systems.” The message was signed by the U.S. Department of Homeland Security and warned recipients that the threat actor appeared to be cybersecurity expert Vinny Troia, who last year penned an investigation of the hacking group The Dark Overlord.
Click to expand...
Presumably that means the email was digitally signed (as opposed to an email signature) and would confirm that an email account was compromised as opposed to just an email address spoofed (which would have been blocked by most recipient mail servers running mundane checks).

So was this email account compromised via a web-based interface or worse via remote or physical access to an FBI machine that had access to the email account?

There was no malware attached to the emails, according to Spamhaus. The group speculated that the hackers could have been attempting to smear Troia or were staging a nuisance attack to flood the FBI with calls.
Click to expand...
Suggests that "The Dark Overlord" will be suspect #1.
 
Norrad said:
My experience with them is the complete opposite. They move at an absolutely glacial pace and completely bungled an investigation that I handed to them on a plate. The only thing that got them off their asses was when I got the media involved after nearly a year of me giving them exact locations on where the guy was staying for weeks on end. But they did take all the credit in the end though :ROFL:
Click to expand...
Details.
 
KingMikel said:
Details.
Click to expand...
I hired an American who refused to supply me any documentation beyond a copy of his passport where he had redacted certain parts. He spun a story of how he deserted his unit in Iraq due to orders he didn't agree with and didn't want them to find him (super suspicious), so I fired him. He started threatening to kill me and at one stage tried to drive me off the road and split up my family. Local police were useless when I went to see them so I started researching the guy which was difficult as he was using a stolen ID/passport and a very common name. Turned out that he was wanted for a string of crimes in various states and was facing trial for the rape of a 5 year old. He faked his death and assumed the identity of another man (I cracked it by tracking down the real guy and he knew the perp as they had worked together in the past). I went to the US embassy with the details and was interviewed by a CIA agent who then said it was a federal issue and would fall under the US Marshalls or FBI. It took months for the FBI to eventually contact me. I had to go back to the embassy and presented everything including a working cellphone number for him and the exact location he was staying at. They ran the photos through a facial recognition system along with his mugshots from various arrests and said it was inconclusive even with the guy whose identity he stole on a conference call with us telling them exactly who the guy was. Things went quiet from there. The guy moved from that location and got a job at a school in another town. Again I contacted them with his location and told them that he is working with children. Nothing but crickets. About a year later he threatened me again. So I sent all of the info to the local newspapers in the county where he had raped the 5 year old. Things blew up from there and loads of people called the newspapers saying that he was definitely the correct guy. I also informed a child protection place that he was working at a school. All the media attention got the US District Attorneys' office involved and only then did the FBI proceed with helping the local police make the arrest (before that there had been zero communication between them and the local police).
 
Norrad said:
I hired an American who refused to supply me any documentation beyond a copy of his passport where he had redacted certain parts. He spun a story of how he deserted his unit in Iraq due to orders he didn't agree with and didn't want them to find him (super suspicious), so I fired him.
Click to expand...
So all the above happened during the interview I assume?
 
Norrad said:
I hired an American who refused to supply me any documentation beyond a copy of his passport where he had redacted certain parts. He spun a story of how he deserted his unit in Iraq due to orders he didn't agree with and didn't want them to find him (super suspicious), so I fired him. He started threatening to kill me and at one stage tried to drive me off the road and split up my family. Local police were useless when I went to see them so I started researching the guy which was difficult as he was using a stolen ID/passport and a very common name. Turned out that he was wanted for a string of crimes in various states and was facing trial for the rape of a 5 year old. He faked his death and assumed the identity of another man (I cracked it by tracking down the real guy and he knew the perp as they had worked together in the past). I went to the US embassy with the details and was interviewed by a CIA agent who then said it was a federal issue and would fall under the US Marshalls or FBI. It took months for the FBI to eventually contact me. I had to go back to the embassy and presented everything including a working cellphone number for him and the exact location he was staying at. They ran the photos through a facial recognition system along with his mugshots from various arrests and said it was inconclusive even with the guy whose identity he stole on a conference call with us telling them exactly who the guy was. Things went quiet from there. The guy moved from that location and got a job at a school in another town. Again I contacted them with his location and told them that he is working with children. Nothing but crickets. About a year later he threatened me again. So I sent all of the info to the local newspapers in the county where he had raped the 5 year old. Things blew up from there and loads of people called the newspapers saying that he was definitely the correct guy. I also informed a child protection place that he was working at a school. All the media attention got the US District Attorneys' office involved and only then did the FBI proceed with helping the local police make the arrest (before that there had been zero communication between them and the local police).
Click to expand...
Where were you living at that time?
 
MightyQuin said:
So all the above happened during the interview I assume?
Click to expand...
No, unfortunately, we used to give new hires two weeks to get their documents together for the Work Permit application. So it was two weeks of him making excuses about forgetting or simply not wanting to give certain docs that he felt weren't necessary etc. and then that final excuse was on the last day when we were going to submit a bunch of employees' documents.
 
Someone got the POP3 and SMTP settings, username and password and spammed the **** out of some email list. Nothing new here. Nothing hacked.
 
As long as those emails didn't assume anyone's pronouns.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X