ShinyHunters claims FBI hack: 'This is NOT financially motivated'
ShinyHunters claims an Oracle PeopleSoft zero-day let it steal 2–3 TB of FBI employee data.
ShinyHunters told The Register it exploited an Oracle PeopleSoft pre-authentication remote-code-execution zero-day on the FBI jobs website, defaced the page, and moved laterally to FBI systems on AWS GovCloud. The group claims it took about 2 to 3 terabytes on current, former, and prospective employees, including human resources, MedLink, and Criminal Justice Information Services. It says it is not seeking payment and instead wants the FBI to retract a May 15 bulletin alleging harassment, swatting, and false extortion claims. The FBI, Oracle, and AWS had not responded or confirmed the allegations at publication.
- Alleged PeopleSoft zero-day enabled remote code execution on the FBI jobs site.
- Group claims 2–3 TB from AWS GovCloud covering employees and applicants.
- No ransom is demanded; it wants an FBI bulletin retracted.
- The FBI, Oracle, and AWS had not confirmed the allegations.
- Vendors
- OracleAmazon Web Services
- Products
- Oracle PeopleSoftAWS GovCloud
- Threat actors
- ShinyHunters
- Organizations
- OracleAmazon Web ServicesInstructure
- Countries
- United States
From the original article
2 min read at theregister.comShinyHunters claims it hacked the FBI and stole more than 2 TB of employee data - and this time it’s personal. The gang wants the Feds to correct the record on how it operates. “This is NOT financially motivated,” a Shiny spokesperson told The Register .
By Jessica Lyons · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.