Standing Intelligence Requirements

For the most up to date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Recommendations

• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFox recommends immediate password changes for the affected account

Details

On May 12, 2022, ZeroFox detected a botnet breach package posted on a Telegram channel "agg_logs". Redline, Vidar, META, Mars, and Raccoon stealer malware families were detected in the breach. The compromised data was extracted from 8,525 infected machines.