Cyber Risks · The Hacker News

FBI Arrests Another Shiny Hunters Suspect Reportedly Involved in Its Jobs Portal Hack

Summary: The FBI arrested another suspected ShinyHunters co-conspirator, a Canadian citizen taken into custody in Pennsylvania, FBI Director Kash Patel said on October 9; the suspect has not been named and no charges have been made public. Reuters counts the arrest as the third made public since the FBI jobs portal breach was announced in late September, and the FBI's review found the breach stemmed from a contractor failing to apply a security patch on an outside-managed platform, with two Reuters sources naming PeopleSoft and Accenture.

What's compelling: The FBI's own review traced the exposure of data on almost all its agents and applicants to a contractor that did not apply a patch explicitly issued to secure the platform - the same failure mode that sits in most third-party estates. ShinyHunters, which the FBI alleges has breached more than 140 organizations and taken at least $70 million in extortion payments since last year, is still at large, and a law enforcement source told CBS News other suspected co-conspirators remain free.

Read the original at The Hacker News ↗

Topics
Cybercrime & Law Enforcement
Related