Standing Intelligence Requirements

For the most up to date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Details

JobTH, an employment website operating from Thailand suffered a data breach. On June 16, 2022, a threat actor "Mahony" from the underground forum Cracked posted a data package containing leaked information from this breach. The data dump was also circulated on Raid Forums on September 13, 2021, and in a deep web forum "Eternia" on January 6, 2021 by the threat actor "StarRain." The threat actor "StarRain" from Eternia noted that the data dump is from the year 2019 and includes 2.8 million users' information. From the package shared on the Cracked forum, ZeroFox extracted 2,729,513 email addresses. Of this total, 2,729,472 records contained plain-text passwords.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFox recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks