ShinyHunters Claims FBI Hack Via PeopleSoft Zero Day
ShinyHunters claims FBI breach via PeopleSoft zero-day, alleging theft of data on 5000 employees.
ShinyHunters claims to have breached the FBI via a zero-day vulnerability in Oracle PeopleSoft, allegedly stealing data on 5000 FBI employees and applicants. The group posted a data sample and claims to have pivoted to AWS GovCloud servers, downloading 2-3TB of data. The attack appears motivated by retaliation for an FBI public service announcement, with the group also defacing the FBI jobs website.
- ShinyHunters claims FBI breach via PeopleSoft zero-day.
- Group alleges theft of data on 5000 FBI employees.
- Breach involved pivot to AWS GovCloud and exfiltration of 2-3TB data.
- Attack motivated by dispute over FBI public service announcement.
- ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid AccountsT1005 Data from Local SystemT1560 Archive Collected DataT1567 Exfiltration Over Web Service
- Vendors
- Oracle
- Products
- PeopleSoftAWS GovCloud
- Threat actors
- ShinyHunters
- Victims
- FBI
- Organizations
- FBIShinyHuntersOracle
From the original article
2 min read at infosecurity-magazine.com
Infamous threat group ShinyHunters claims to have personal information on thousands of FBI employees
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.