apply.fbijobs[.]govDomain
Reported by 4 independent sources · first reported by SOCRadar · last reported
Last reported 19 days ago
What the reports say
7 reports, newest first · the exact sentence from each-
⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests“ShinyHunters has drawn attention in recent weeks for hijacking the darknet website of Cl0p and its hack of the FBI's "apply.fbijobs[.]gov" portal.”
-
Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited“The FBI’s online portals for job applicants (at apply.fbijobs[.]gov) and special agent applicants (at fbijobs.gov/special-agents) are still unavailable, following what appears to be successful compromises by the ShinyHunters cyber extortion group.”
-
ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members“…the darknet website of a fellow cybercriminal outfit, Cl0p, by exploiting an unpatched flaw in Grav CMS and its hack of the FBI's "apply.fbijobs[.]gov" portal, stealing around three terabytes of sensitive data.”
-
Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation“Federal Bureau of Investigation's (FBI) job application site apply.fbijobs[.]gov, stealing terabytes of sensitive data.”
-
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation“…ap was detained by Dutch authorities, ShinyHunters claimed credit for an unusually brazen breach at the FBI’s job application site apply.fbijobs[.]gov.”
-
FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day“The FBI’s online portals for job applicants (at apply.fbijobs[.]gov) and special agent applicants (at fbijobs.gov/special-agents) are still unavailable, following what appears to be successful compromises by the ShinyHunters cyber extortion group.”
-
ShinyHunters Claims Access to FBI Systems“The following day, apply.fbijobs[.]gov was defaced with ShinyHunters’ familiar “seized” banner and Umbreon artwork before the page was taken down and later restored.”
Indicators reported together
named in the same reports- fbijobs[.]govin 3 reports
Copy this indicator · defanged
Also named with it: CVE-2026-35273, CVE-2026-76504, CVE-2026-104286, CVE-2026-81963, CVE-2026-81578, CVE-2026-82078, CVE-2026-73581, CVE-2026-75973, CVE-2026-76183, CVE-2026-77791, CVE-2026-78383, CVE-2026-78437, CVE-2026-79677, CVE-2026-86248, CVE-2026-86350, CVE-2026-87022, CVE-2026-76708, CVE-2026-76709, CVE-2026-76710
Thanks — we review every report.