HighZero-Day
FBI Arrests Another Suspected ShinyHunters Hacker Linked to FBIJobs.gov Breach
Cyber Security News·Source published ·1 min read
What happened?
The FBI has arrested another suspected ShinyHunters co-conspirator as investigators pursue the group believed to be behind the FBIJobs.gov breach. Director Kash Patel announced the arrest on October 9, saying the incident affected a third-party-managed platform. The announcement follows several recent actions against suspected members of the hacking network. “Our agents in the field have arrested another suspected co-conspirator of the ShinyHunters group,” Patel said.
Key details
- FBI arrested another suspected ShinyHunters co-conspirator linked to the FBIJobs.gov breach.
- The New York Times identified the suspect as a Canadian citizen arrested in Pennsylvania.
- FBI Cyber Assistant Director Brett Leatherman said the breach resulted from a security failure after a contractor failed to install a security patch.
- ShinyHunters claimed exploitation of an alleged Oracle PeopleSoft zero-day flaw and movement into FBI-managed AWS GovCloud infrastructure.
- A suspected ShinyHunters member detained in Jordan reportedly began helping investigators identify other members.
- Exposed data reportedly includes names, addresses, Social Security numbers, birth dates, and emergency contacts.
Fixes and mitigations
- FBI removed the contractor and took steps to reduce further risk and protect employees.
What to look for
- New leak site appeared after an earlier site went offline, suggesting some members remained active.
Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.