FBI Hacker Dropped Stolen Airbus Data on 9/11
Summary: A cybercriminal using the handle USDoD leaked data on roughly 3,200 Airbus vendors - names, addresses, phone numbers, and email addresses - on BreachForums on Sept. 11, 2023, and claimed the data came from passwords stolen from a Turkish airline employee with third-party access to Airbus systems. Threat intelligence firm Hudson Rock traced the credentials to a RedLine info-stealer infection on that employee's machine, likely from pirated, backdoored Windows software, and USDoD closed the post by naming Lockheed Martin and Raytheon as next targets.
What's compelling: The entry point was one third-party employee's infected laptop, and info-stealers like RedLine also lift authentication cookies and tokens that let attackers reuse a session in their own browser and bypass multi-factor authentication - the same mechanism Microsoft said a China-backed group used to steal a signing key granting near-unfettered access to U.S. government inboxes.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026