ShinyHunters claims it infiltrated FBI systems by exploiting an undisclosed Oracle PeopleSoft vulnerability, then moved into the Bureau’s AWS GovCloud environment and exfiltrated 2 to 3 terabytes of sensitive records. The group says the attack was retaliation for an FBI alert issued in May, while the FBI says the incident is under investigation and has not confirmed the breach. #ShinyHunters #FBI #OraclePeopleSoft #AWSGovCloud
Keypoints
- ShinyHunters claims it breached FBI internal systems through an Oracle PeopleSoft zero-day flaw.
- The alleged intrusion targeted the FBI recruitment portal and candidate documentation.
- The hackers say they later moved into the FBI’s AWS GovCloud environment.
- They claim to have stolen 2 to 3 terabytes of sensitive FBI data.
- ShinyHunters says the attack was retaliation for an FBI security alert issued in May.
Read More: https://securityonline.info/fbi-shinyhunters-data-breach/