fbijobs[.]govDomain
Reported by 10 independent sources · first reported by The Hacker News · last reported
Last reported 5 days ago
What the reports say
20 reports, newest first · the exact sentence from each-
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site“In late September, ShinyHunters hacked the FBI recruitment website fbijobs[.]gov and taunted the agency by threatening to publish the stolen files, which reportedly included medical and psychological records, Social Security numbers and home addresses, and information about each em…”
-
⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More“… field have arrested another suspected co-conspirator of the ShinyHunters group – the group believed to be responsible for the recent FBIjobs[.]gov incident, which occurred on a platform managed by a third-party vendor," FBI director Kash Patel said.”
-
Net Closes Around ShinyHunters with Another FBI Arrest“… field have arrested another suspected co-conspirator of the ShinyHunters group – the group believed to be responsible for the recent FBIjobs[.]gov incident, which occurred on a platform managed by a third-party vendor,” he said on X (formerly Twitter).”
-
FBI Arrests Another ShinyHunters Suspect Reportedly Involved in Its Jobs Portal Hack“It calls ShinyHunters "the group believed to be responsible for the recent FBIjobs[.]gov incident."”
-
FBI Drops Accenture Contractor After Sensitive Data Breach“The FBI acknowledged that it is aware of claims involving unauthorized activity affecting FBIjobs[.]gov and said it is investigating.”
-
FBI confirms 'multiple' arrests related to ShinyHunters hack“…er any of ShinyHunters’ members had taken Leatherman up on his offer to “reach out first.” In late September, ShinyHunters hacked the FBIJobs[.]gov portal and claimed it stole sensitive personal details about current, former, and prospective FBI employees.”
-
Alleged ShinyHunters Leader Arrested in Jordan“The arrest was made shortly after the extortion group hacked and defaced the FBI’s jobs site, FBIJobs[.]gov, boasting about stealing 2-3 terabytes of data.”
-
ShinyHunters Suspect Detained in Jordan Helps FBI Track Down the Group“Then the FBI jobs site defacement that ShinyHunters left after the FBIjobs[.]gov breach prominently featured an ASCII art version of the same Pokémon character, and the image appears identical to one used in a 2020 HackForums defacement attributed to ShinyHunters, a year before Van…”
-
Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0-day exploited“The FBI’s online portals for job applicants (at apply.fbijobs.gov) and special agent applicants (at fbijobs[.]gov/special-agents) are still unavailable, following what appears to be successful compromises by the ShinyHunters cyber extortion group.”
-
ShinyHunters Defiant After FBI Calls on Members to Come Forward“Referring to the hack of FBIJobs[.]gov and the one-week ultimatum it gave to the Bureau to retract a previous report stating the group tends to exaggerate its claims, ShinyHunters now says all was a marketing campaign meant to protect its brand.”
-
FBI to ShinyHunters: 'We know how to find you'“…s seized electronic devices and are investigating additional leads: “More arrests possible.” Early last week, ShinyHunters hacked the FBIJobs[.]gov portal and claimed to steal sensitive personal details about current, former, and prospective FBI employees.”
-
24-Year-Old Arrested in Dutch Investigation Into ShinyHunters“Then the FBI jobs site defacement that ShinyHunters left after the FBIjobs[.]gov breach prominently featured an ASCII art version of the same Pokémon character, and the image appears identical to one used in a 2020 HackForums defacement attributed to ShinyHunters, a year before Van…”
-
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats“The development comes in the aftermath of ShinyHunters seizing the FBI's FBIjobs[.]gov portal by what it said was a new zero-day in Oracle PeopleSoft.”
-
FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day“The FBI’s online portals for job applicants (at apply.fbijobs.gov) and special agent applicants (at fbijobs[.]gov/special-agents) are still unavailable, following what appears to be successful compromises by the ShinyHunters cyber extortion group.”
-
28th September – Threat Intelligence Report“The FBI has confirmed unauthorized activity affecting FBIjobs[.]gov after the ShinyHunters group defaced the website.”
-
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells“Federal Bureau of Investigation's FBIJobs[.]gov portal (which remains inaccessible as of writing) and stole about 2-3 TB of sensitive data to contest allegations made by the agency against the group in a May 2026 alert.”
-
ShinyHunters tells The Reg: We hacked the FBI to 'protect our business'“"The FBI is aware of a cyber-criminal enterprise group claiming a compromise of the FBIJobs[.]gov portal and alleged impact to FBI employee personally identifiable information (PII),” an FBI spokesperson told The Register.”
-
ShinyHunters Claims Access to FBI Systems“The FBI has confirmed only that it is aware of claims involving unauthorized activity affecting FBIJobs[.]gov and is investigating.”
-
ShinyHunters claims FBI breach was revenge for “false” report“The FBI says it is aware of claims involving unauthorized activity affecting FBIjobs[.]gov and is investigating, although “broken” does not necessarily mean “breached.””
-
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants“In a statement shared with Reuters, the FBI said it's "aware of claims regarding unauthorized activity affecting FBIjobs[.]gov and is currently investigating."”
Indicators reported together
named in the same reports- apply.fbijobs[.]govin 3 reports
Copy this indicator · defanged
Also named with it: CVE-2026-35273, CVE-2026-87902, CVE-2026-93616, CVE-2026-94127, CVE-2026-85102, CVE-2026-88771, CVE-2026-88772, CVE-2026-63077, CVE-2026-28324, CVE-2026-28325, CVE-2026-95281, CVE-2026-95284, CVE-2026-95310, CVE-2026-95313, CVE-2026-95322, CVE-2026-95329, CVE-2026-95339, CVE-2026-95349, CVE-2026-95350
Thanks — we review every report.