Support NeoGAF

[godhandiscen]

FBI Statement on Incident Involving Fake Emails | Federal Bureau of Investigation

The FBI and CISA are aware of the incident this morning involving fake emails from an @ic.fbi.gov email account. This is an ongoing situation, and we are not able to provide any additional information at this time.

www.fbi.gov

Update:

Hoax Email Blast Abused Poor Coding in FBI Website – Krebs on Security

krebsonsecurity.com

 

[Quixz]

Amateurs

 

[M1chl]

 

[DoomGyver]

 

[Taxexemption]

Almost no organizations are prepared to deal with cyber security stuff. Even organizations that are really good at it often have failures. We just don't have the amount of people with the correct skills for a society as technologically complex as ours is. Also, if you aren't an expert in this area, it's virtually impossible to hire well for it. Hiring is largely done by HR people who can't tell an actual expert from a quack.

 

[HoodWinked]

Almost no organizations are prepared to deal with cyber security stuff. Even organizations that are really good at it often have failures. We just don't have the amount of people with the correct skills for a society as technologically complex as ours is. Also, if you aren't an expert in this area, it's virtually impossible to hire well for it. Hiring is largely done by HR people who can't tell an actual expert from a quack.

Hiring based on quotas like skin color and genitals should help out with this greatly.

 

[ManaByte]

 

[Themacabre]

So are they "fake emails" (like the article says) from the @ic.fbi.gov account or real emails from the @ic.fbi.gov account? Those are two vastly different things. Also, with they way they might be interconnected/set-up it may not be some fbi.gov email server at all but some other server that has the authority to send emails as the domain for whatever reason. From the external perspective, their SPF record includes a /16 which is a shit ton or IPs, so who knows what other weird things they are doing. Most likely though, it's phishing/social engineering, like every other time there's a "hack".

 

[godhandiscen]

So are they "fake emails" (like the article says) from the @ic.fbi.gov account or real emails from the @ic.fbi.gov account? Those are two vastly different things. Also, with they way they might be interconnected/set-up it may not be some fbi.gov email server at all but some other server that has the authority to send emails as the domain for whatever reason. From the external perspective, their SPF record includes a /16 which is a shit ton or IPs, so who knows what other weird things they are doing. Most likely though, it's phishing/social engineering, like every other time there's a "hack".

Apparently it was a white hat hacking group that tried to point out the FBI a vulnerability. I added a link with an update to the OP.

 

[EverydayBeast]

 

[Fbh]

Meanwhile, at the FBI:

 

[poppabk]

Meanwhile, at the FBI:

No those are the people responsible. They hack into the FBI at least twice an episode.

 

[ManaByte]

Meanwhile, at the FBI:

What the

How is that supposed to work?

What?

 

[plushyp]

What the

How is that supposed to work?

What?

From the infamous CSI episode

 

[dr_octagon]

Have they used visual basic to set up a gooey interface to track the hack?

 

[nocsi]

This is a result of FBI spending 5x more on offensive capabilities than defensive.

 

[Mistake]

Apparently it was a white hat hacking group that tried to point out the FBI a vulnerability. I added a link with an update to the OP.

No good deed goes unpunished
-The Government

 

[Nitty_Grimes]

Terrifying to receive?? Get a fucking grip it looks it was written by a seven year old and that’s probably an insult to seven year olds.

Can’t even spell through properly if that’s a cut and paste in the reddit.