$10 Infostealers Target US Security: Pentagon & FBI Breached

A recent investigation highlights how low-cost cybercrime tools are infiltrating even the most secure US organizations. Employees at key defense entities, such as the Pentagon, major contractors like Lockheed Martin, and federal agencies including the FBI, have been compromised by Infostealer malware.

These breaches occur with minimal effort, often costing cybercriminals as little as $10, exploiting the weakest link in cybersecurity: human error.

Understanding the Threat

Infostealers operate by exploiting user negligence rather than sophisticated hacking methods. They lie dormant, waiting for users to click on malicious links or download infected files, such as game mods or pirated software. Once activated, the malware discreetly collects credentials, session cookies, and sensitive documents.

Cybercriminals then sell this data on dark web marketplaces, with prices starting at $10 per compromised device. This stolen information can provide access to military VPNs, email accounts, and even allow attackers to bypass two-factor authentication.

Impact and Scope

According to the report, over 30 million computers globally have been affected, with a significant portion containing corporate credentials. For defense personnel, the stakes are incredibly high, as many are involved in projects concerning advanced technologies like fighter jets and nuclear submarines. Compromised devices pose a risk not only to employers but also to national security.

Case Studies: Honeywell and the US Navy

The report details specific incidents, such as the infection of nearly 400 employees at Honeywell, a key defense contractor. This breach exposed internal systems and third-party credentials, including those for Microsoft and Cisco.

The US Navy also suffered, with 30 personnel's credentials stolen. This data leak includes access to email systems and military training resources, potentially allowing attackers to navigate military networks and access classified systems.

Such breaches can lead to supply chain attacks, as demonstrated by a recent vulnerability discovered by ethical hackers in a software supply chain firm.

National Security Implications

The threat extends beyond the US. Infostealers like Redline, Vidar, and Formbook pose a risk to global infrastructure, affecting everyone from Fortune 500 companies to small subcontractors.