St. Louis Federal Reserve Suffers DNS Breach
Summary: The St. Louis Federal Reserve alerted users that on April 24, 2015, attackers manipulated routing settings at a DNS vendor used by the Bank, redirecting some web traffic to rogue pages mimicking research.stlouisfed.org, including pages for FRED, FRASER, GeoFRED and ALFRED. The advisory said the Fed's own website was not compromised but that users who logged in that day may have had their user names and passwords accessed, and would be asked to change passwords at next login.
Bottom line: The redirect targeted the research sites economists use, and the Fed's notice warned that redirected users may have been exposed to phishing, malware and credential theft - credentials that, as commenters noted, belong to analysts at banks and financial institutions.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026