Standing Intelligence Requirements

For the most up to date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Details On May 4, 2022, French media outlet ZATAZ reported an alleged data leak from Quebec (quebec[.]ca), a Government information and services page that brings several hundred Québec government websites and services together, operating from Canada. The alleged leak resulted in the exfiltration of at least 190,000 Canadian users information from the site. On June 3, 2022, threat actor "milka" shared what they claimed was the same Québec government data on popular Russian language Dark Web forum, XSS. ZeroFox extracted 192,591 email addresses from this shared leak. Other notable compromised data fields include name, gender, phone number, and address.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFox recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks