“And this would’ve never been found by anyone who would responsibly disclose, due to the notice the feds have on their website.” “I could’ve 1000% used this to send more legit looking emails, trick companies into handing over data etc.,” Pompompurin said. We continue to encourage the public to be cautious of unknown senders and urge you to report suspicious activity to or In an interview with KrebsOnSecurity, Pompompurin said the hack was done to point out a glaring vulnerability in the FBI’s system. The impacted hardware was taken offline quickly upon discovery of the issue. “This is an ongoing situation and we are not able to provide any additional information at this time.

“The FBI and CISA are aware of the incident this morning involving fake emails from an email account,” reads the FBI statement. In response to a request for comment, the FBI confirmed the unauthorized messages, but declined to offer further information. CJIS systems are available to the criminal justice community, including law enforcement, jails, prosecutors, courts, as well as probation and pretrial services.” I am contacting you today because we located a botnet being hosted on your forehead, please take immediate action thanks.”Ī review of the email’s message headers indicated it had indeed been sent by the FBI, and from the agency’s own Internet address. The domain in the “from:” portion of the email I received - corresponds to the FBI’s Criminal Justice Information Services division (CJIS).Īccording to the Department of Justice, “CJIS manages and operates several national crime information systems used by the public safety community for both criminal and civil purposes. “Check headers of this email it’s actually coming from FBI server. Around that time, KrebsOnSecurity received a message from the same email address.

12 ET, tens of thousands of emails began flooding out from the FBI address warning about fake cyberattacks.

The phony message sent late Thursday evening via the FBI’s email system.

Mass effect 2 hacking