aecifo

FBI warns that hackers are filing fake police data requests to steal people’s private information

Umito November 12, 2024

FBI Issues Private Sector Notice Regarding Emergency Data Requests
Hackers use stolen .gov email addresses to pose as authorities
Mitigation measures recommended by the FBI should be implemented

Cybercriminals are using stolen government email addresses to submit fraudulent emergency data requests to U.S. businesses to steal customers’ personally identifiable information (PII), which could be used for nefarious purposes such as phishing and identity theftwarned the experts.

This attack vector has gained popularity since August 2023, justifying the issuance of a Private sector reporting of the FBI.

The Bureau also published a list of mitigation measures that businesses must put in place to keep personal data secure and ensure that only genuine data requests are processed.

Fraudulent requests are increasing

Over the past year, the FBI has seen a significant increase in forum posts from cybercriminals regarding fraudulent data requests. The trend comes because one user said that for $100, they could teach people how to use data requests to get information about any social media account. Shortly after, another user discovered that by using a “.gov” email address, he could impersonate authorities and obtain much more detailed information to use for phishing.

Fraudulent data requests have gradually become more advanced and threatening, with one user posting in December 2023 that they included a threat of harm or death to a person if the data request was not processed and approved.

Shortly after, in March 2024, another known cybercriminal submitted a Mutual Legal Assistance Treaty (MLAT) to PayPal. The MLAT used details of a child trafficking investigation, including case number and legal code, to appear legitimate, but PayPal denied the MLAT.

In August 2024, a cybercriminal listed for sale “high-quality .gov emails intended for espionage, social engineering, data extortion, Dada requests, etc.” » which could be used for fraudulent data access requests to obtain private information about customers, including their names, email addresses, telephone numbers. numbers and other personal information.

The FBI recommends that businesses double-check the security level of all connections between third parties they interact with and their own systems, as well as external or remote connections.

Businesses should also be wary of time-sensitive data requests that highlight the urgency of requests and check all request details for inconsistencies or falsifications. The full list of mitigation measures can be found here.

Apre-salomemanzo

Apre-salomemanzo

FBI warns that hackers are filing fake police data requests to steal people’s private information

Umito

Tax raids loom in Rachel Reeves’ budget today

Lonnie Walker IV signs with Euroleague’s Zalgiris Kaunas

The 2024 election cycle is coming to an end – here’s what we know

Dev Diwali 2024: Pradosh kaal muhurat, rituals to worship Lord Shiva, Deep Daan in Varanasi, and more

FBI warns that hackers are filing fake police data requests to steal people’s private information

Umito

You Might Also Like

Tax raids loom in Rachel Reeves’ budget today

Lonnie Walker IV signs with Euroleague’s Zalgiris Kaunas

The 2024 election cycle is coming to an end – here’s what we know

Dev Diwali 2024: Pradosh kaal muhurat, rituals to worship Lord Shiva, Deep Daan in Varanasi, and more