Standing Intelligence Requirements

For the most up to date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Recommendations

• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks.
• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance.
• If one of your entities receives an alert, ZeroFox recommends immediate password changes for the affected account.

Details

On May 30, 2022, BreachForums actor "LeakBase" posted an alleged data breach package associated with Star Hero (starhero[.]in), an Indian social media platform to create, share, and discover short videos. ZeroFox discovered that another threat actor "Chucky" shared the same dump in the same forum. ZeroFox extracted 9,342 usernames and/or email addresses. Of this total, an assessed 7,924 records contained plain-text passwords. Other notable compromised data fields include name, gender, and phone number.