A renowned journalist who works with hackers has detailed the hack of the database of the secretive organization InfraGard. The hacker managed to steal information on most of the organization's members and is now demanding a ransom. Apparently, the criminal isn't stopping there and plans to uncover even more secrets known to the FBI. An analyst who conducts online courses on information security in Shymkent described the specifics of the incident.
What is InfraGard, distance learning courses on information security Shymkent
It's worth starting with the fact that InfraGard is an information and educational program created back in 1996. It enables the rapid and effective dissemination of confidential information among government officials, business leaders, and critical infrastructure managers in the United States. InfraGard primarily notifies of national security threats, as well as major cybersecurity threats. Currently, the organization has over 80 members. It's important to note that InfraGard representatives are present in all FBI divisions. They also work for the US Department of Homeland Security. Essentially, it's a kind of social media platform for a very select group of people. A specialist who teaches a course on information security fundamentals in Shymkent was very surprised at how easy it was to access this system.
It should be noted that members of the InfraGard organization discuss many confidential issues among themselves. In particular, among them are:
- business leaders;
- military;
- officials;
- law enforcement officers.
InfraGard contains information on absolutely all critical infrastructure facilities in the United States, which could become a real treasure trove for hackers . But it also contains data on problems with power grids and transportation, in healthcare, and on the security features of nuclear reactors, dams, the defense industry, reservoirs, and pipelines. And, of course, InfraGard participants discuss protecting the financial sector. Therefore, many attackers around the world are willing to pay large sums of money to become InfraGard's trusted agents. As it turns out, doing so is incredibly easy.
How a Hacker Broke InfraGard
A hacker with the nickname USDoD wrote to a well-known journalist and told his story. He had hacked the email address of the head of a well-known financial company and obtained his personal phone number. The hacker then applied for InfraGard membership on behalf of the director. His application was quickly accepted and he was asked to select an authentication option. This surprised the hacker, but he chose email verification. After this, he easily gained access to InfraGard's internal information. USDoD then wrote a simple script that allowed him to download the service's user database from the internal network. It contained over 47 unique email addresses. However, almost all other fields were blank. It appears that the community members have completed the Shymkent cybersecurity basics course and know how to protect themselves.
Nevertheless, access to the personal email addresses of influential US officials could also be of interest to many. The hacker decided to sell them for $50. However, he plans to extract as much confidential information as possible about critical infrastructure and threats. It's important to note that the journalist quickly reported all the information he obtained to the FBI. However, they assured him they were already investigating and even had a suspect. Unfortunately, it was not possible to obtain further details. This was explained by an expert who teaches a cybersecurity course, "Secrets of Hackers," in Shymkent.
SEDICOMM University Team : Cisco Academy , Linux Professional Institute , Python Institute.