Cyber Risks · Krebs on Security

Two U.S. Men Charged in 2022 Hacking of DEA Portal

Summary: Two U.S. men, 19-year-old Sagar Steven Singh of Pawtucket, Rhode Island and 25-year-old Nicholas Ceraolo of Queens, New York, were charged in the Eastern District of New York with hacking a DEA portal that taps into 16 federal law enforcement databases. Prosecutors allege both belonged to a cybercriminal group called ViLE that obtained victims' personal information through fraudulent emergency data requests from compromised police and government email accounts, then posted it on a forum run by the group's leader to extort victims into paying for its removal.

What you should know: The group's access route was not a novel exploit but compromised police and government email accounts used to file warrantless emergency data requests, and the complaint alleges Ceraolo posed as a Bangladeshi police official to obtain user data from U.S. social media platforms between February and May 2022.

Read the original at Krebs on Security ↗

Topics
Cybercrime & Law Enforcement
Related