#CIA #DIA #Mossad
News Review
x.com/mikenov/status/2104252…Michael Novakhov (@mikenov) #News #FBI #Security
Two senior FBI agents ousted over investigation into alleged harassing calls to wife of Trump adviser Stephen Miller … – News Review
thenewsandtimes.blogspot.com…— https://x.com/mikenov/status/2104252342820323469— Michael Novakhov (@mikenov) Sep 27, 2026
Category: Articles and Tweets
Category Added in a WPeMatico Campaign
#News #FBI #Security
Two senior FBI agents ousted over investigation into alleged harassing calls to wife of Trump adviser Stephen Miller … – News Review
thenewsandtimes.blogspot.com…— Michael Novakhov (@mikenov) Sep 27, 2026
#ShinyHunters #Cybersecurity #FBI
How Did It Happen?
According to cybersecurity reports compiled by Google’s Mandiant, the group successfully exploited a vulnerability in Oracle’s PeopleSoft enterprise software, an HR system integrated into the FBI’s recruiting environment. The hackers allegedly targeted organizations that relied on web application firewalls but failed to immediately apply a critical software update issued to patch the exploit. Internal frustration within the bureau has grown, with current and former cyber investigators calling the breach a highly embarrassing, “lazy security failure” that leaves intelligence personnel highly vulnerable to foreign countersurveillance.
With the ShinyHunters Hack 2026, the FBI fell in one swoop – Google Search google.com/search?q=With+the…— Michael Novakhov (@mikenov) Sep 27, 2026
#FBI #ShinyHunters #HumanFactors
ShinyHunters Hack 2026: Human factors – AI Mode –
Google Search google.com/search?q=ShinyHun…
In analyzing the ShinyHunters cyberattacks of 2026—specifically their high-profile breach of the FBI’s jobs and personnel portals—the “human factors” can be broken down into three core dimensions: hacker psychology and ego, social engineering tactics, and the severe counterintelligence risks to victims and their families. While many technical details focus on software zero-days, human behaviors, motives, and emotional levers remain the focal points of the group’s operations. [1, 2]
1. Hacker Psychology: Ego, Retaliation, and Coercion
Unlike standard financially motivated ransomware groups, ShinyHunters has demonstrated a deep reliance on psychological manipulation and personal aggrandizement. [3]The Retaliation Motive: The September 2026 FBI breach was explicitly launched out of spite. The hackers targeted the bureau because they were “offended” by a May 2026 FBI cyber advisory that characterized their tactics as deceptive and warned victims not to pay. [1, 4, 5]
“Not Extortion, Maybe Coercion”: The group demanded that FBI Director Kash Patel and cybersecurity officials remove or alter the public warning within a week. Experts note that ShinyHunters heavily values bragging rights and showing up massive targets, using stolen data as an emotional lever to dictate public narratives. [1, 3, 6]2. Social Engineering and Identity Targeting
When ShinyHunters isn’t directly exploiting server vulnerabilities, they exploit human fallibility through aggressive, multi-channel identity targeting. [7]
Voice Phishing (Vishing): In an August 2026 attack against the security firm ReliaQuest, threat actors utilized direct voice phishing. They impersonated authoritative figures over the phone to trick employees into handing over corporate credentials. [7]
MFA Fatigue and Lookalike Infrastructure: The group regularly sets up lookalike Single Sign-On (SSO) login pages to harvest user credentials. They then bombard the targeted employee with multi-factor authentication (MFA) push notifications until the victim suffers from “MFA fatigue” and accidentally approves the fraudulent access request. [7]3. Personal Aggression: Victim and Family Harassment
The most severe human element of ShinyHunters’ playbook is their willingness to weaponize personal, non-corporate information to exert extreme psychological pressure. [4]
Human Factors WeaponizedTactics & ImpactPersonal Data WeaponizationIn the FBI hack, they stole home addresses, phone numbers, medical histories, and spouses’ Social Security numbers.Family HarassmentThey are known to bypass corporate channels to directly text and call victims’ family members with threatening messages.Psychological Coercion & SwattingThe FBI warned that ShinyHunters uses “swatting” (falsely reporting a critical emergency to dispatch armed police to a victim’s home) and fake, embarrassing media to terrify individuals into compliance.Counterintelligence RiskBy leaking data containing the home addresses and spouses of agents—including those working covert operations against drug cartels and foreign intelligence agents—they introduce severe physical safety risks.
[1] nytimes.com
[2] aviatrix.ai
[3] cbc.ca
[4] ic3.gov
[5] bbc.com
[6] nextgov.com
[7] aha.org— Michael Novakhov (@mikenov) Sep 27, 2026
#FBI #ShinyHunters #HumanElement
ShinyHunters Hack 2026: Human factors – AI Overview
The human factors in the 2026 cyber operations linked to the ShinyHunters hacking group center around highly sophisticated social engineering, aggressive victim harassment, psychological coercion, and the targeted weaponization of personnel data. While the group frequently exploits technical flaws—such as the massive Oracle PeopleSoft vulnerability (CVE-2026-35273)—human manipulation remains a primary vehicle for gaining initial access, forcing ransom payments, and retaliating against defenders. [1, 2, 3, 4]
1. Initial Access: Identity-First Social Engineering
Rather than brute-forcing traditional network perimeters, ShinyHunters heavily targets the human element within corporate and government Single Sign-On (SSO) ecosystems: [5]
AI-Driven Voice Phishing (Vishing): ShinyHunters has executed aggressive vishing campaigns targeting employee credentials. In a prominent April 2026 breach of home security giant ADT, the group compromised an employee’s Okta account strictly through a voice phishing call. [5, 6, 7]MFA Manipulation & Fatigue: During a targeted August 2026 social engineering campaign against ReliaQuest, the attackers utilized lookalike SSO infrastructure to harvest credentials and bombard the target with Multi-Factor Authentication (MFA) push approvals until an employee authorized the session. [8, 9]
Malicious SaaS & Token Abuse: They exploit internal human trust by tricking users into authorizing malicious SaaS applications or leaking OAuth tokens, allowing them to walk directly through open enterprise doors. [5, 7]
2. Extortion & Cognitive Pressure TacticsWhen forcing organizations to pay multi-million dollar ransoms, ShinyHunters bypasses typical IT departments to apply psychological pressure directly onto individuals: [7, 10]
Direct Harassment of Families: According to an FBI Public Service Announcement, when corporate or institutional victims refuse to pay, the group systematically sends threatening text messages and phone calls to employees and their family members. [1]Swatting: In extreme cases, the group uses “swatting” (filing false, dangerous emergency reports to draw armed law enforcement to a victim’s home) to terrify targets into compliance. [1]
Fabricated Personal Compromise: They leverage psychological fear by falsely claiming to possess deeply embarrassing or compromising photographs/videos of individual victims to induce panic and force rapid payment. [1]
3. Case Study: The September 2026 FBI Hack ClaimThe ultimate display of “human factors” as a motive manifested in the group’s highly publicized September 2026 breach claim against the FBI: [11, 12]
Ego and Coercion as a Motive: ShinyHunters openly stated that their hack of the FBI’s hiring infrastructure was not financially motivated. Instead, they were “offended” by the government’s characterization of their tactics in a May 2026 alert. The entire breach was launched as psychological coercion to force the FBI to retract its public warning. [2, 11, 13, 14]Targeting Human Resources (HR) Data: Instead of classified operational secrets, the group specifically targeted 2 to 3 terabytes of personnel and applicant data. By stealing names, home addresses, phone numbers, and Social Security numbers of agents and their spouses, they effectively held the physical privacy and safety of the FBI’s workforce hostage. [2, 13, 15]
4. Downstream Human VulnerabilitiesThe fallout of ShinyHunters’ data theft creates long-term human vulnerabilities across the tech landscape. Following massive data exfiltrations—such as their mid-2026 hack of the Canvas Learning Management System, which impacted millions of records—the stolen personal data is actively repurposed. Threat actors use this deep, leaked personal context to design highly convincing, hyper-targeted phishing campaigns that easily impersonate school administrators, IT support, or corporate executives in follow-on attacks. [16, 17]
[1] ic3.gov[2] docontrol.io
[3] obsidiansecurity.com
[4] arcticwolf.com
[5] docontrol.io
[6] en.wikipedia.org
[7] digitalxraid.com
[8] aha.org
[9] aha.org
[10] ic3.gov
[11] nextgov.com
[12] aviatrix.ai
[13] nytimes.com
[14] bbc.com
[15] mashable.com
[16] malwarebytes.com
[17] halcyon.aiSee also:
ShinyHunters Hack 2026: Human element – Google Search google.com/search?q=ShinyHun…— Michael Novakhov (@mikenov) Sep 27, 2026
ShinyHunters Hack 2026: Human factors – Google Search google.com/search?q=ShinyHun…
— Michael Novakhov (@mikenov) Sep 27, 2026
ShinyHunters Hack 2026: Human factors – Google Search google.com/search?q=ShinyHun…
— Michael Novakhov (@mikenov) Sep 27, 2026
#FBI #ShinyHunters #HumanElement
ShinyHunters Hack 2026: Human element – Google Search google.com/search?q=ShinyHun…— Michael Novakhov (@mikenov) Sep 27, 2026
“The world has watched Russia’s war against Ukraine largely through the movement of its front lines,” @Max_Beznosiuk and @ThomReillyNV write. “But behind those lines, Moscow is building something more durable: a hidden state inside Ukraine”: theatlantic.com/internationa…
— @TheAtlantic Sep 27, 2026
The European Commission has told capitals to reduce demand for gas and electricity in a bid to tame prices amid a global energy crunch.
politico.eu/article/eu-commi…— @POLITICOEurope Sep 27, 2026