Fighting Fake EDRs With ‘Credit Ratings’ for Police
Summary: KrebsOnSecurity reports that former FBI agent Matt Donahue left the bureau in April 2020 to found Kodex, a startup that assigns 'credit ratings' to law enforcement agencies and pools request data across clients so tech companies can spot fraudulent Emergency Data Requests. The article cites transparency figures including Verizon's 35,000 EDRs from U.S. law enforcement in the second half of 2021 out of 114,000 total requests, Meta's 21,700 EDRs in the first half of 2021, and compliance rates that often exceed 90 percent.
What's compelling: Hackers only need access to a single police email account - out of roughly 18,000 U.S. jurisdictions - to send a fake EDR backed by a claim that someone will die without immediate data, and providers comply upwards of 90 percent of the time.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026