Hackers posing as law enforcement officers are tricking major tech companies into sharing people's private data, according to a group of hackers known as doxers. These individuals use spoofed email addresses and fake documents to make it appear as though they are authorized to obtain sensitive information from tech companies.
In one notable case, a hacker sent an email to Charter Communications claiming to be Officer Jason Corse of the Jacksonville Sheriff’s Office, requesting personal data for a victim who was allegedly involved in online activities. The company responded promptly with the requested information within 20 minutes.
The hackers claim that they have successfully extracted similar information from virtually every major US tech company, including Apple and Amazon, as well as smaller platforms like video-sharing site Rumble. They also reportedly shared information about how to craft these requests, which can bypass traditional verification processes.
The problem lies in the fact that there are over 18,000 individual law enforcement agencies in the US, each with its own email naming conventions and domain registrations. This creates a loophole that hackers like Exempt, who claims to be a Gen Z male located in Europe, can exploit.
To trick companies into handing over information, the hackers use two main tactics: (1) using authentic law enforcement email accounts that have been compromised through social engineering or hacking, or (2) creating convincing fake domains that closely mimic legitimate police departments. They also craft highly convincing fake official documents to support their requests.
While some tech companies are taking steps to improve their security, such as using secure online portals like Kodex, hackers continue to find ways to circumvent these measures.
As one former FBI agent noted, "Public/private-sector coordination is an incredibly complex and nuanced space that could very well be the difference between a kid being found in a trunk, or not." However, many of these requests are still responded to quickly, often within minutes, without proper verification.
In one notable case, a hacker sent an email to Charter Communications claiming to be Officer Jason Corse of the Jacksonville Sheriff’s Office, requesting personal data for a victim who was allegedly involved in online activities. The company responded promptly with the requested information within 20 minutes.
The hackers claim that they have successfully extracted similar information from virtually every major US tech company, including Apple and Amazon, as well as smaller platforms like video-sharing site Rumble. They also reportedly shared information about how to craft these requests, which can bypass traditional verification processes.
The problem lies in the fact that there are over 18,000 individual law enforcement agencies in the US, each with its own email naming conventions and domain registrations. This creates a loophole that hackers like Exempt, who claims to be a Gen Z male located in Europe, can exploit.
To trick companies into handing over information, the hackers use two main tactics: (1) using authentic law enforcement email accounts that have been compromised through social engineering or hacking, or (2) creating convincing fake domains that closely mimic legitimate police departments. They also craft highly convincing fake official documents to support their requests.
While some tech companies are taking steps to improve their security, such as using secure online portals like Kodex, hackers continue to find ways to circumvent these measures.
As one former FBI agent noted, "Public/private-sector coordination is an incredibly complex and nuanced space that could very well be the difference between a kid being found in a trunk, or not." However, many of these requests are still responded to quickly, often within minutes, without proper verification.
]
]
these doxers r like total pros they got every major tech co convinced to spill people's private info 
like what is the point of even having security measures if hackers can just fake their way in? 
and its not like its just a few bad apples, its a huge network of law enforcement agencies with similar email domains and registrations that these hackers are exploiting 
so yeah lets all just take a deep breath and say "oh well" to our online privacy 
. I had an experience with my own email account once and I knew how hard it is to spot a fake email. But seriously, the fact that they're getting info from major tech companies is just crazy 
.
. It's always good to be on the safe side when it comes to your personal info. But at the same time, I don't think anyone's entirely off the hook here - these hackers are definitely playing with fire 
.
. I wonder if they'll ever get caught 
. And what about all those companies that are supposed to be taking steps to improve their security? Are they doing enough to protect us from these hackers? 
It's a good thing we're having this conversation, right? 
hackers out there! 
They're like masterminds 
, creating fake emails and docs that look super legit 
. Can't believe some companies are still responding fast 
without verifying the sender 
! We need to do better 
, especially with all these law enforcement agencies out there 
. If we don't tighten up our online security 
, hackers will keep exploiting this loophole 
. Let's get tech companies working together 
to stop these hackers and protect our personal info 
!
! I was chatting with my friend on Rumble and some dude sent me an email claiming to be from the "Federal Bureau of Investigation" asking for my personal info. I'm like "yeah sure thing" thinking it's legit, but then I did a quick search and couldn't find any evidence that this FBI agency even exists 
They're a total lifesaver! But still, it's not enough. We need to do more to protect ourselves online. 
. I mean, who knew law enforcement email accounts could be hacked? It's like a never-ending cat-and-mouse game, where the hackers are always one step ahead 
. And 18k individual agencies in the US? That's just crazy! 
They need to get their act together and stop letting these hackers have so much fun 
. I mean, if they want to play this game, let's at least make them use Comic Sans font on their fake documents, LOL! 
. Maybe we should all start using a strong password... like "ILovePizza" 
?
this is getting crazy how do companies not just vet the email sender first 
they just spoof their emails and fake docs and voilà everyone's private data is handed over like a pizza 
and btw why r tech companies so slow to adapt their security measures 
We need to stay ahead of the game and keep educating ourselves on how to protect our online info. Stay safe out there! 
. I mean, who wouldn't want to test their skills by trying to trick companies into giving them private data? It's like a big game of cat and mouse, and the hackers are just playing along. Plus, it's not like they're doing any harm - they're just exploiting a loophole in the system 
.
.
and what's crazy is that they're getting info from major tech companies and smaller ones too 
anyway these hackers are just using that loophole to the fullest, it's like they have a master plan to mess with our private data 
.
.
. It's a real concern, especially with so many law enforcement agencies in the US. Can't they just use some common sense and verify everything before handing over sensitive info?