Hackers uses FBI server to email fake warning, Agency orders probe

In US, the FBI has ordered an investigation after thousands of fake email messages were sent from one of its servers warning of a possible cyber-attack. Earlier, fake emails purportedly from the U.S. Department of Homeland Security warning of cyberattacks were sent out Saturday from a secure FBI computer server. According to US reports, more than 100,000 emails were sent out. The FBI confirmed independent security group Spamhaus's report that a large number of fake emails were sent in two waves early Saturday from an address on the government's Law Enforcement Enterprise Portal, which is used by multiple government agencies. Some of the emails, sent in the name of the Homeland Security cyber threat detection group, were headlined: "Urgent: threat actor in systems." They warned recipients that they were the target of a "sophisticated" hacking attack from a known extortion gang, according to Spamhaus' tweet.

These emails look like this:

Sending IP: 153.31.119.142 (https://t.co/En06mMbR88)
From: eims@ic.fbi.gov
Subject: Urgent: Threat actor in systems pic.twitter.com/NuojpnWNLh

— Spamhaus (@spamhaus) November 13, 2021

"The FBI and CISA are aware of the incident Saturday morning involving fake emails from an @ic.fbi.gov email account," they said in a statement. The agency said the affected hardware was quickly taken offline after the issue was detected and warned the public to be "cautious of unknown senders" and to report suspicious activity to the government.

It is not yet clear whether the emails were sent by an individual with cleared access to the FBI servers or if hackers were involved.  FBI and the DHS Cybersecurity and Infrastructure Agency confirmed the incident, without offering details.