BOSTON: A hacker who reportedly posed as the CEO of a financial institution claims to have obtained access to the more than 80,000-member database of InfraGard, an FBI-run outreach program that shares sensitive information on national security and cybersecurity threats with public officials and private sector actors who run US critical infrastructure. The hacker posted samples they said were from the database to an online forum popular with cybercriminals last weekend and said they were asking $50,000 for the entire database.
The hacker obtained access to InfraGard’s online portal by posing as the CEO of a financial institution, they told independent cybersecurity journalist Brian Krebs, who broke the story. They called the vetting process surprisingly lax.
The FBI declined to comment. Krebs reported that the agency told him it was aware of a potential false account and was looking into the matter.
InfraGard’s memberhip is a veritable critical infrastructure Who’s Who. It includes business leaders, IT professionals, military, state and local law enforcement and government officials involved in overseeing the safety of everything from the electrical grid and transportation, to health care, pipelines, nuclear reactors, the defense industry, dams and water plants and financial services. Founded in 1996, it is the FBI’s largest public-private partnership, with local alliances affiliated with all its field offices. It regularly shares threat adviseries from the FBI and the Department of Homeland Security and serves as a behind-closed-doors social media site for select insiders.
The database has the names, affiliations and contact information for tens of thousands of InfraGard users. Krebs first reported its theft on Tuesday.
The hacker, going by the username USDoD on the BreachForums site, said on the site that records of only 47,000 of the forum’s members’ — slightly more than half — include unique emails. The hacker also posted that the data contained neither Social Security numbers nor dates of birth. Although fields existed in the database for that information, InfraGard’s security-conscious users had left them blank.
However, the hacker told Krebs that they had been messaging InfraGard members, posing as the financial institution’s CEO, to try to obtain more personal data that could be criminally weaponized.
The AP reached the hacker on the BreachForums site via private message. They would not say whether they had found a buyer for the stolen records or answer other questions. But they did say that Krebs’ article “was 100 percent accurate.”
The FBI did not offer an explanation for how the hacker was able to trick it into approving the InfraGard membership. Krebs reported that the hacker had included a contact email address that they controlled — as well as the CEO’s real mobile phone number — when applying for InfraGard membership in November.
Krebs quoted the hacker as saying InfraGard approved the application in early December and that they were able to use the email to receive a one-time authentication code.
Once inside, the hacker said, the database information was easy to obtain with a simple software script.
Hacker claims breach of FBI’s critical-infrastructure portal
https://arab.news/67edw
Hacker claims breach of FBI’s critical-infrastructure portal
- The hacker obtained access to InfraGard’s online portal
Bangladesh halts controversial relocation of Rohingya refugees to remote island
- Administration of ousted PM Sheikh Hasina spent about $350m on the project
- Rohingya refuse to move to island and 10,000 have fled, top refugee official says
DHAKA: When Bangladesh launched a multi-million-dollar project to relocate Rohingya refugees to a remote island, it promised a better life. Five years on, the controversial plan has stalled, as authorities find it is unsustainable and refugees flee back to overcrowded mainland camps.
The Bhasan Char island emerged naturally from river sediments some 20 years ago. It lies in the Bay of Bengal, over 60 km from Bangladesh’s mainland.
Never inhabited, the 40 sq. km area was developed to accommodate 100,000 Rohingya refugees from the cramped camps of the coastal Cox’s Bazar district.
Relocation to the island started in early December 2020, despite protests from the UN and humanitarian organizations, which warned that it was vulnerable to cyclones and flooding, and that its isolation restricted access to emergency services.
Over 1,600 people were then moved to Bhasan Char by the Bangladesh Navy, followed by another 1,800 the same month. During 25 such transfers, more than 38,000 refugees were resettled on the island by October 2024.
The relocation project was spearheaded by the government of former Prime Minister Sheikh Hasina, who was ousted last year. The new administration has since suspended it indefinitely.
“The Bangladesh government will not conduct any further relocation of the Rohingya to Bhasan Char island. The main reason is that the country’s present government considers the project not viable,” Mizanur Rahman, refugee relief and repatriation commissioner in Cox’s Bazar, told Arab News on Sunday.
The government’s decision was prompted by data from UN agencies, which showed that operations on Bhasan Char involved 30 percent higher costs compared with the mainland camps in Cox’s Bazar, Rahman said.
“On the other hand, the Rohingya are not voluntarily coming forward for relocation to the island. Many of those previously relocated have fled ... Around 29,000 are currently living on the island, while about 10,000 have returned to Cox’s Bazar on their own.”
A mostly Muslim ethnic minority, the Rohingya have lived for centuries in Myanmar’s western Rakhine state but were stripped of their citizenship in the 1980s and have faced systemic persecution ever since.
In 2017 alone, some 750,000 of them crossed to neighboring Bangladesh, fleeing a deadly crackdown by Myanmar’s military. Today, about 1.3 million of them shelter in 33 camps in the coastal Cox’s Bazar district, making it the world’s largest refugee settlement.
Bhasan Char, where the Bangladeshi government spent an estimated $350 million to construct concrete residential buildings, cyclone shelters, roads, freshwater systems, and other infrastructure, offered better living conditions than the squalid camps.
But there was no regular transport service to the island, its inhabitants were not allowed to travel freely, and livelihood opportunities were few and dependent on aid coming from the mainland.
Rahman said: “Considering all aspects, we can say that Rohingya relocation to Bhasan Char is currently halted. Following the fall of Sheikh Hasina’s regime, only one batch of Rohingya was relocated to the island.
“The relocation was conducted with government funding, but the government is no longer allowing any funds for this purpose.”
“The Bangladeshi government has spent around $350 million on it from its own funds ... It seems the project has not turned out to be successful.”
