Skip to content
Master Your Money — Safeguard Your Financial Future — Financial Insights — Financial Horizon's Tech Hub — Crime-and-justice

Cybercriminals Exploit Police Emails to Target Tech Companies

Cybercriminals are using advanced phishing techniques to gain access to police emails. They're then sending unauthorized data requests to tech companies.

,   and  Administrator
1 min read
In this image we can see an airplane tied with cables inside a building. In the background, we can...
In this image we can see an airplane tied with cables inside a building. In the background, we can see a group of police lights and some chairs.

Cybercriminals Exploit Police Emails to Target Tech Companies

Cybercriminals are exploiting emergency data requests (EDRs) and hacking police email accounts to target U.S. technology companies. Compliance with EDRs is high, with Verizon responding to around 90 percent of requests in the second half of 2023. However, the FBI warns of an increase in cybercriminal services targeting Microsoft accounts, with Kodex suspending nearly 4,000 law enforcement users in the past year.

Kodex, a startup helping tech companies verify law enforcement data requests, processed 1,597 EDRs in the past 12 months. However, around 30 percent failed second-level verification, raising concerns about authenticity. Cybercriminals are using advanced phishing techniques, such as AI-generated emails, vishing, and quishing, to gain access to police and government Hotmail accounts. They then send unauthorized subpoenas and customer data requests to tech companies.

One cybercriminal, known as Pwnstar and Pwnipotent, is selling fake EDR services on cybercrime forums. They claim to control government emails from over 25 countries. Some fake EDR vendors sell access to hacked accounts, leaving it up to the buyer to forge needed documents. EDRs bypass official review and do not require court-approved documents, making them difficult to verify.

The FBI urges police departments and governments worldwide to enhance email security due to this increasing threat. Tech companies must remain vigilant and work with services like Kodex to verify the authenticity of EDRs. Cybercriminals' use of sophisticated phishing techniques and sale of fake EDR services highlight the need for robust security measures and international cooperation.

Read also:

Related

Latest