IC3 (Organization): news timeline & CVEs

ShinyHunters claims FBI breach was revenge for “false” report

ShinyHunters claims it breached the FBI and stole personal data on agents and job applicants.

Extortion group ShinyHunters posted that it compromised FBI services including Criminal Justice, HR, and Medlink, and that it holds sensitive data on nearly all FBI agents and job applicants. It gives the bureau one week to remove or correct a May 15, 2026 FBI/IC3 advisory, while denying harassment, swatting, sextortion, and any link to The Com, and says the demand is not financially motivated. 404 Media reported that the group supplied a sample on roughly 5,000 agents, including names, home addresses, phone numbers, and spouse details.

Malwarebytes Labsupdated Sep 26, 19:03 UTC · 13h agofirst Sep 23, 12:03 UTC · 3d agoData breach 21 sources

Scammers impersonate cops, use arrest threats to extort victims

FBI IC3 warns scammers impersonating police and federal agents caused over $1.6 billion in reported losses between January 2025 and July 2026.

The FBI's IC3 updated its 2022 alert on government impersonation scams, citing over $1.6 billion in losses between January 2025 and July 2026, plus 6,833 complaints with nearly $36 million in losses for the arrest-threat variant. Scammers threaten victims with arrest, prosecution, jury duty fines, or license revocation, demanding payment via prepaid cards, wire transfers, cryptocurrency, or couriers. Callers spoof real government numbers, including IC3's own, and some use fake uniforms, mock government facilities, and AI to appear convincing.

Help Net SecuritySep 21, 10:53 UTC · 5d agoPhishing & fraud in the wild

North Korean WaterPlum Hackers Infect 30,000 PCs via Fake Job Interviews, Steal $10.7M Crypto

North Korean WaterPlum actors posed as recruiters to infect 30,000 developers' PCs and steal $10.7M in cryptocurrency via BeaverTail, InvisibleFerret and other malware.

North Korean-linked WaterPlum operators, behind the Contagious Interview campaign, posed as recruiters on job boards and freelance marketplaces to trick developers into running malicious files between December 2025 and July 2026, infecting at least 30,000 computers in over 100 countries. The malware families BeaverTail, InvisibleFerret, OtterCookie, OtterCandy and StoatWaffle harvested data from more than 7,000 cryptocurrency wallets, moving at least $10.7 million to North Korea. IC3 tied the activity to North Korean IT workers using 'laptop farms', and Japan dismantled one such site linked to an enabler. Actors reportedly used AI face-swapping during video interviews, and a compromised developer can serve as an entry point into employers' networks.

Cyber Security Newsupdated Sep 22, 14:00 UTC · 4d agofirst Sep 21, 08:42 UTC · 5d agoThreat actor in the wild 5 sources

FBI: Fake cop and government impersonation scams cost victims $1.6B

FBI IC3 says impersonation scams posing as police and government officials cost victims over $1.6 billion across nearly 61,000 complaints since January 2025.

The FBI's Internet Crime Complaint Center received close to 61,000 complaints of law-enforcement and government impersonation scams between January 2025 and July 2026, with losses exceeding $1.6 billion and an average per-complaint loss above $26,000. Variants include fake jury-duty fines (6,833 complaints, ~$36 million), profession-targeted extortion (3,322 complaints, over $37 million), fake document renewals (496 complaints, $348,000), and video-call scams using counterfeit uniforms and mock government sets (1,809 complaints, over $140 million). Comparable schemes are surging abroad, with Dutch police logging more than 7,200 fake-officer reports in the first half of 2026. The FBI reminded the public that agencies never demand payment by phone and urged independent verification of callers.

The Register · SecuritySep 18, 16:19 UTC · 8d agoPhishing & fraud

IC3

Timeline4 articles

Appears with

ShinyHunters claims FBI breach was revenge for “false” report

Scammers impersonate cops, use arrest threats to extort victims

North Korean WaterPlum Hackers Infect 30,000 PCs via Fake Job Interviews, Steal $10.7M Crypto

FBI: Fake cop and government impersonation scams cost victims $1.6B