The U.S. Department of Justice, FBI, and international law enforcement partners recently disrupted a GRU network of compromised small-office home-office (SOHO) routers used as part of malicious hijacking operations. All device owners and network defenders are encouraged to take action to remediate and reduce the attack surface of similar edge devices.

Russian GRU 85th Main Special Service Center (85th GTsSS) cyber actors — also known as APT28, Fancy Bear, and Forest Blizzard — have collected credentials and exploited vulnerable routers worldwide, including compromising TP-Link routers using CVE-2023-50224.The GRU has indiscriminately compromised a wide pool of US and global victims, especially targeting information related to military, government, and critical infrastructure.

The FBI, NSA, and co-sealing agencies encourage SOHO router users to change default usernames and passwords, disable remote management interfaces from the Internet, update to latest firmware versions, and upgrade end-of-support devices. Users should also carefully consider certificate warnings in web browsers and email clients.

Organizations that allow telework should review relevant policies regarding how employees access sensitive data — including the use of virtual private networks (VPNs) or hardened application configurations.

If you, or someone you know, suspects that you have been targeted or compromised by a Russian GRU cyber intrusion, NSA recommends reporting the activity to your local FBI field office, filing a complaint with the Internet Crime Complaint Center (IC3), or otherwise following your organization’s incident reporting requirements.

Read the full report here.

Source: NSA

Stay in the know with breaking news from across the IC and IC contracting landscape by becoming a paid subscriber to IC News. Your support makes our work possible.

The post NSA, FBI warn of Russian GRU threats against routers appeared first on Intelligence Community News.

The authoring agencies have observed pro-Russia hacktivist groups—attributed to the Cyber Army of Russia Reborn (CARR), Z-Pentest, NoName057(16), Sector16, and affiliated groups—capitalizing on the widespread availability of inadequately secured virtual network computing (VNC) connections to infiltrate operational technology (OT) control devices within critical infrastructure systems and conduct cyber operations against organizations worldwide.

The groups’ ongoing opportunistic targeting methodology can lead to broad targeting and indiscriminate compromise of critical infrastructure entities, including those in Water and Wastewater, Food and Agriculture, and the Energy Sector. Further, their observed lack of strategic focus increases the likelihood of targeting of unintended victims, and tends to result in haphazard attacks with unanticipated damages.

These actors are primarily seeking notoriety with their actions, regularly self-attributing and exaggerating cyberattacks on social media and in group channels to garner attention from peers and the media. Despite this, and their lack of sophisticated ability, actors have been observed willfully causing damage to vulnerable critical infrastructure.

These actors utilize simple, cheap, and easy-to-replicate tactics, techniques, and procedures (TTPs) for the ease of dissemination and replication across various entities, increasing the risk of wide-spread adoption by other cyber actors and escalated frequency of attacks. The authoring agencies warn there is risk that continued attacks may result in further harm or consequences.

Critical infrastructure entities, OT asset owners and operators, and OT device manufactures are encouraged to become familiar with the outlined TTPs and apply the recommended mitigation strategies to reduce the likelihood and impact of incidents related to pro-Russia hacktivists. The report also provides incident response actions organizations should take if compromise is detected.

Read the full report here.

Source: NSA

Don’t miss out — become a paid subscriber to IC News, and lock in subscription rates at 2025 prices. You’ll get full access to breaking news from across the IC contracting space, with new articles each weekday.

The post NSA, FBI warn of pro-Russia Hacktivist threats appeared first on Intelligence Community News.

The transaction expands TekSynap’s mission portfolio across IT service management, network engineering, software development, cloud, and cyber operations with an emphasis on FBI programs. The acquisition strengthens TekSynap’s presence supporting the FBI across the National Capital Region (NCR), Quantico, Virginia, Clarksburg, West Virginia, Criminal Justice Information Services (CJIS) Division, and the growing technology campus at Redstone Arsenal in Huntsville, Alabama.

“We are excited to welcome JBA into the TekSynap family. Their long-standing support of the FBI and expertise in delivering world-class IT services align perfectly with our mission to provide innovative solutions across the Federal landscape. The acquisition of JBA represents a significant milestone for TekSynap. JBA’s trusted service with the FBI and its proven expertise in IT solutions further expand our capabilities and deepen our customer relationships. We look forward to building upon this strong foundation as we continue to deliver mission-critical support to the FBI and other Federal Law Enforcement partners,” said Troy Walter, vice president, justice at TekSynap.

“Welcoming JBA to TekSynap represents the unification of two strong cultures dedicated to delivering reliable, mission-focused solutions to the Bureau’s most complex technical challenges,” added Kamran Jinnah, chief executive officer of TekSynap. “With JBA’s proven track record supporting the FBI, we are now uniquely positioned to accelerate the secure delivery of classified systems, extending capabilities seamlessly from the data center to the tactical edge.”

Source: TekSynap

Don’t miss out — become a paid subscriber to IC News, and lock in subscription rates at 2025 prices. You’ll get full access to breaking news from across the IC contracting space, with new articles each weekday.

The post TekSynap acquires JBA appeared first on Intelligence Community News.

FBI is an intelligence-driven and threat-focused national security organization with both intelligence and law enforcement responsibilities. The EDAS mission is to provide the FBI with operational data discovery, exploitation, analytics, and visualization tools. The extraction, transformation, and loading (ETL) of raw data into actionable intelligence is a core enabler of EDAS delivering on its mission. Big data technologies are required to perform ETL and analytic processes due to the volume, velocity, variety, value, and veracity of the enterprise data stewarded by EDAS. The Section continually strives to explore, adapt, and implement the best processes and technologies known within the software industry.

EDAS is looking for effective and optimal technologies and solutions that enable the extraction, transformation, and data analysis of big data at scale. Specifically, EDAS is looking for big data software solutions and technical expertise to set up and train FBI personnel on the software in order support EDAS ETL and analytic processes. The expertise and solutions will help ensure that EDAS can continue to deliver on the FBI’s mission today and into the future.

Review the FBI Big Data Extraction Tool sources sought.

Source: SAM

Don’t miss out — become a paid subscriber to IC News, and lock in subscription rates at 2025 prices. You’ll get full access to breaking news from across the IC contracting space, with new articles each weekday.

The post FBI releases Big Data Extraction Tool sources sought appeared first on Intelligence Community News.

NGI’s repository of biometric and criminal history information enables more advanced investigative capabilities for the FBI and other law enforcement and intelligence agencies. The FBI’s Criminal Justice Information Services (CJIS) division administers NGI, the world’s largest electronic repository of biometric and criminal history information. Leidos has worked with the FBI to improve the system’s accuracy to more than 99.6 percent for fingerprint identification.

Leidos will provide more capabilities through this program. Those include mobile apps, biometric algorithms, automated testing, and the integration of other emerging technologies.

“Leidos has long partnered with the FBI to deliver mission-critical biometric systems, including NGI—the largest, most efficient electronic repository of biometric and criminal history data,” said Roy Stevens, Leidos National Security Sector president. “Leidos’ work with the FBI to improve the system’s accuracy facilitates many more criminal identifications, helping to keep America safe.”

The task order covers a one-year base period of performance, with four option years.

Source: Leidos

Stay in the know with breaking news from across the IC and IC contracting landscape by becoming a paid subscriber to IC News. Your support makes our work possible.

The post FBI selects Leidos for NGI contract appeared first on Intelligence Community News.

The objective of this notice is to poll the market for commercial, proprietary and nonproprietary software solutions from commercial entities for the modernization of the FBI’s intelligence production and dissemination processes on a Secret-level classified network and integrate with existing downstream services and systems.

The software solution would support the full lifecycle of intelligence production, including collaboration, drafting, associated workflow approvals, and evaluation and feedback with visual document tracking through the entire lifecycle. A preferred software can track progress – for example, how long it takes a document to go from review to approval.

The FBI is seeking information from manufacturers regarding the availability and capabilities of a production application that facilitates end-to-end documentation creation, collaboration, approval, dissemination, and tracking. The goal is to streamline and modernize the production lifecycle within the organization, enabling seamless collaboration, real-time editing, approval workflows, and performance metrics.

Review the FBI intelligence production platform RFI.

Source: SAM

The right opportunity can be worth millions. Don’t miss out on the latest IC-focused RFI, BAA, industry day, and RFP information – subscribe to IC News today.

The post FBI posts RFI for intelligence production modernization appeared first on Intelligence Community News.

The Procurement Services Acquisitions Unit intends to award a single, firm-fixed priced contract for intelligence analyst support services as described in the SOW.  This procurement is being conducted in accordance with FAR part 15 and will be evaluated using the criteria and procedures stated in the “Instructions to Offerors.”

Vendors interested in the contract opportunity must adhere to all terms and conditions stated in the RFP documents. The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Regulation. The associated North American Industrial Classification System (NAICS) code for this procurement is 541611, Administrative Management and General Management Consulting Services, with a size standard of $24,500,000.00.

Each proposal must be clearly stated, complete, and provide a straightforward, concise delineation of your company’s capabilities and services to satisfy this RFP. This is a recurring service contract with a period of performance that includes a 12-month base period, four (4) option years, and one (1) up to 6-month extension.

Review the FBI intelligence analyst support services RFP.

Source: SAM

The right opportunity can be worth millions. Don’t miss out on the latest IC-focused RFI, BAA, industry day, and RFP information – subscribe to IC News today.

The post FBI posts intelligence analysis RFP appeared first on Intelligence Community News.

The five-year contract will see Trilogy assist CJIS in transitioning the NCIC to secure, leading-edge, cloud-based technology. Trilogy will provide essential services for the program known as FBI FAST (FBI Agility with SAFe {Scaled Agile Framework} Teams) to modernize the FBI’s mission critical system at CJIS.

Trilogy, a provider of cloud migration, data analytics, cybersecurity, software integration, and application modernization, will serve as the prime contractor working to migrate the NCIC system to the cloud. An SBA Certified 8(a) small and minority-owned systems and software engineering company, this is the largest contract award to date for Trilogy in a Small Business compete effort.

“This contract represents an important expansion in our continued relationship with the FBI, with whom we have been a longtime partner,” said Trilogy CEO Brandon Downey. “We certainly know and understand how critical the FBI’s mission is for national safety and security, and we’re proud to be a part of that. We look forward to supporting the transformation of the FBI’s NCIC system.”

Source: Trilogy Innovations

Your competitors read IC News each day. Shouldn’t you? Learn more about our subscription options, and keep up with every move in the IC contracting space.

The post Trilogy Innovations awarded $93M FBI contract appeared first on Intelligence Community News.

The FBI requests capability statements of professional services firms capable to provide operational intelligence services in direct support of the FBI LIU by conducting bulk and targeted exploitation, intelligence, and data analyses to be disseminated to FBI and USIC customers as appropriate.

The FBI protects US citizens from terrorist attacks and violent crime as well as foreign intelligence operations, espionage, civil rights violations, public corruption, criminal organizations and enterprises, and white-collar crime. The FBI Laboratory Division provides forensic exploitation of evidence collected in support of criminal and national security investigations. The LIU provides analysis of forensic exploitation to address the requirements of the FBI and the United States Intelligence Community (USIC).

Additionally, the FBI’s Laboratory Division has recovered and seized improvised explosives devices (IEDs) and related materials from the Department of Defense (DoD) for forensic and technical analysis in support of the ongoing war on terrorism. Subsequently, in December 2004 the Terrorist Explosive Device Analytical Center (TEDAC), located in Huntsville, Alabama, was formally established and given the mission of forensically and technically exploiting for evidentiary, investigative and intelligence purposes IEDs used by terrorists.

Intelligence is often a key element in the development of effective strategies for FBI investigations. The FBI LIU has a requirement to provide timely, all-source strategic, tactical, and raw intelligence and investigative leads related to all facets of Laboratory exploitation. This includes analysis of improvised explosive devices, facilitators, and supply chains, to support TEDAC partners, law enforcement, the USIC, and foreign partners, when necessary, in the detection, identification, and assessment of individuals associated with fabricating and placing terrorist explosive devices and providing material support to IED networks around the world.

As such, the FBI has a need for trained intelligence analysts to assist in responding to requests for information from the US Government and partner agencies, producing intelligence products for dissemination to the USIC and foreign partners and helping to identify potential leads for FBI investigations.

The Objective of this requirement is to provide operational intelligence services in direct support of the FBI Laboratory Intelligence Unit by conducting bulk and targeted exploitation, intelligence, and data analyses to be disseminated to FBI and USIC customers as appropriate.

FBI LIU seeks support services to provide raw intelligence, tactical analysis, and operational analysis, as appropriate, to support LIU’s intelligence functions and analytical needs, in furtherance of FBI investigations and operations. Analytical functions include data exploitation, tactical analysis, raw intelligence, as well as threat and targeting analysis, as appropriate.

Review the FBI LIU RFI.

Source: SAM

The right opportunity can be worth millions. Don’t miss out on the latest IC-focused RFI, BAA, industry day, and RFP information – subscribe to IC News today.

The post FBI LIU seeks intelligence services appeared first on Intelligence Community News.

FBI’s Directorate of Intelligence (DI), Information Technology Section (ITS) is seeking vendor supported OSINT tools and services that collect Publicly Available Information (PAI) and / or Commercially Available Information (CAI) from the internet and social media platforms. Responses to this RFI may be used to formulate final requirements and/or to identify qualified vendors capable of meeting those requirements. The description outlines preliminary capabilities envisioned for the FBI’s Open-Source Intelligence Tools Indefinite Delivery Indefinite Quantity (IDIQ) contract, hereafter referred as OSINT IDIQ. Responses to the RFI should include detailed information on potential software and products and how the FBI could best implement them, as well as potential costs for implementation (e.g., licensing prices). The FBI may request demonstrations of proposed products and solutions after responses are received.

DI of the FBI manages the Social Media Program, providing tools and training to assist Headquarters Divisions and Field Offices in conducting Social Media research and searches nationwide. The DI Social Media Program ensures that users have tools required to search for internet threats, and that users complete privacy and civil liberties training to perform these searches in accordance with applicable federal laws, regulations, and policy.

The objective of the RFI is to survey the landscape of Social Media and OSINT tools that exist across the market and meet the capabilities set forth below. The FBI is looking both at major OSINT collection systems and smaller systems that may contain focused information collection capabilities. Ultimately the FBI intends to develop a storefront of approved tools by leveraging the Indefinite Delivery Indefinite Quantity (IDIQ) type of contract vehicle with resources that align with the needs, requirements, and specifications for FBI use.

Review the FBI OSINT RFI.

Source: SAM

Time is running out — become a paid subscriber to IC News today, and lock in subscription rates at 2024 prices. You’ll get full access to breaking news from across the IC contracting space, with new articles each weekday.

The post FBI posts OSINT RFI appeared first on Intelligence Community News.