Standing Intelligence Requirements

For the most up to date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Details

On May 22, 2022, the Telegram Channel "ARVIN" posted a data breach package targeting the Sofrip, a textile recycling industry specialized in used clothing, shoes, wiping rags and fraying operating from Tunisia, North Africa. The data dump was also circulated in a Telegram channel "ARES V.2" (hxxps[:]//t[.]me/aresfreedatav2/458) on May 22, 2022. From the package published in Telegram Channel "ARVIN", ZeroFox extracted 7,491 email addresses. Of this total, an assessed 298 records contained hashed passwords.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFox recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks