Standing Intelligence Requirements

For the most up to date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Details

Rostelecom Smart Home, a Russia-based smart-home management solutions provider, suffered a data breach. The corresponding data package was shared on various platforms over the internet, such as on the Telegram channels "Dataleak" (on June 17, 2022), Breached Data | Group (on June 8, 2022), Утечки информации (translated as "information leaks" (on June 8, 2022), as well as in an underground forum called BreachForums (on June 9, 2022 – by the threat actor "Addka72424"). The threat actor "Addka72424" from BreachForums noted that the data package is from December 18, 2021. The package includes 712,999 lines – with full name, email address, phone number, hashed (bcrypt) password, IP address, date of registration, and last activity information. From this package, ZeroFox extracted 646,739 email addresses. Of this total, an assessed 262,071 records contain hashed passwords.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFox recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks