FBI’s Vetted Info Sharing Network ‘Infra Gard’ Hacked
Summary: A cybercrime forum user known as USDoD put the FBI's InfraGard member database, covering more than 80,000 members, up for sale on the Breached forum on Dec. 10, 2022, after gaining a vetted account by applying in the name and personal details of a financial industry CEO. USDoD said the application, submitted in November with an email address they controlled but the CEO's real mobile number, was approved in early December, and that a Python script then pulled user data through an API built into the InfraGard site.
What you should know: The FBI's own vetting approved an imposter posing as the head of a major U.S. financial corporation, and that account was still able to send direct messages to other executives through the InfraGard portal as of publication - the member list may not have been the end game.
Read the original at Krebs on Security ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026