Standing Intelligence Requirements

For the most up to date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Details

T-Mobile, the wireless communications giant and provider of 4G LTE and 5G networks, faced a data breach. The breached data contained employment details (such as job titles and dates of employment), names, email addresses, and other personal details of people working with T-Mobile. The data was circulated on underground forums, and ZeroFox discovered it being shared by a user "nightly" on the Russian-speaking forum XSS. From this package, ZeroFox extracted 39,271 email addresses.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFox recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks