Breach Disclosure: IIMJobs

On November 23, 2020, the actor "n3xtr4n" on the Russian-language forum XSS posted an 8.73 GB data breach package targeting the organization IIMJobs (iimjobs[.]com), an online recruitment platform for middle and senior management positions in India. The data was also circulated by the now-banned actor "tudos" on RaidForums. The breach contained approximately 4,300,000 records, and had 102 column headers. Emails, MD5 hashed passwords, IP addresses and resumes were included in the breach.

Standing Intelligence Requirements

PII & Fraud

For the most up to date list of ZeroFOX Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks.
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance.
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account.

Details

According to an article by Hackread, approximately 1.4 million registered users had their accounts and MD5 hashed passwords exposed. The hashed passwords were not salted.