Slashdot: CISA/DOGE Software Engineer’s Login Credentials Appeared in Multiple Leaks From Info-Stealing Malware in Recent Years

May 11, 2025

—

Source URL: https://yro.slashdot.org/story/25/05/11/0451222/cisadoge-software-engineers-login-credentials-appeared-in-multiple-leaks-from-info-stealing-malware-in-recent-years?utm_source=rss1.0mainlinkanon&utm_medium=feed
Source: Slashdot
Title: CISA/DOGE Software Engineer’s Login Credentials Appeared in Multiple Leaks From Info-Stealing Malware in Recent Years

Feedly Summary:

AI Summary and Description: Yes

Summary: The reported incident highlights serious vulnerabilities in cybersecurity involving the exposure of login credentials from a U.S. government employee, raising concerns about security practices within critical infrastructure agencies. This situation emphasizes the ongoing risks associated with credential theft and the implications for national security.

Detailed Description:
– The employee in question works for both the Cybersecurity and Infrastructure Security Agency (CISA) and the Department of Government Efficiency (DOGE).
– Multiple public leaks from info-stealer malware have exposed the individual’s login credentials, indicating that his devices may have been compromised.
– As a CISA employee, the individual has access to sensitive information related to federal government networks and critical infrastructure, heightening the security implications of the breach.
– The report details that the employee’s credentials were published at least four times in malware logs starting from 2023.
– Info-stealer malware not only pilfers login information but also has the capability to log keystrokes and capture screen outputs, sending this data back to attackers who may then publish it.
– The exposed credentials belong to a Gmail account linked to the employee and have appeared in 51 data breaches documented by the service “Have I Been Pwned”.
– Some notable breaches that contributed to credential exposure include:
– 2013 breach affecting 3 million Adobe account holders
– 2016 breach of 164 million LinkedIn users
– 2020 vulnerability impacting 167 million Gravatar users
– Recent breach at the conservative news site The Post Millennial
– The sustained exposure of these credentials suggests inadequate security measures, as information was leaked from service providers due to prior compromises.
– The risk of continued exposure over a decade underscores systemic issues in managing sensitive information securely.

Key Implications for Security and Compliance Professionals:
– Need for enhanced monitoring of credential usage and more robust protected data practices, especially within government sectors.
– Importance of implementing multi-factor authentication and regular credential rotation to mitigate risks from potential breaches.
– Recognition of the necessity for comprehensive training regarding cybersecurity hygiene among personnel handling sensitive data in critical industries.
– Awareness of the implications of historical data breaches on current security postures and the potential cascading effects on national security due to human error or negligence.

01 1 2 3 4 5 7 a access account Act Adobe AGI AI and app art as attack attackers authentication avatar aware awareness Bi breach breaches by C capability CERN CI CIA CISA co compliance compliance professionals compromised concerns core credential credential exposure credential rotation credential theft credentials critical critical infrastructure Current cyber cybersecurit Cybersecurity Cybersecurity and Infrastructure Security Agency Cybersecurity and Infrastructure Security Agency (CISA) cybersecurity hygiene D data data breach Data breaches data practices de Department of Government Efficiency document DoT dual e efficiency end Engineer engineers error exp fact factor authentication federal government for g Gen Gmail Go government government efficiency government networks gs H high Highlight historical data http HTTPS human human error implications in incident information infrastructure infrastructure security issue ite k Key keys l least led Li Link linked LinkedIn logs long M malware malware logs man measures Monitor monitoring multi multi-factor authentication N nation national security negligence network networks news NGO no non o of on only ory out output Outputs over post potential pre professionals public Q question R raising RCE red report Risk risks Ro RoT s sec sector secure security security and compliance security hygiene security implications security measure security measures security posture security postures security practices sensitive data sensitive information service service providers size SoC software software engineer source SSO start stealing stealing malware system T Tails the theft Time to Tor TP training trie two U.S. U.S. government under US usage use user Users uth V vulnerabilities vulnerability Ware Wi x