Standing Intelligence Requirements

For the most up to date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Details

On July 14, 2022, a reputed threat actor "Wild" from the deep web forum BreachForums posted a data breach package targeting Date Hot Brunettes, a dating site operating from United States. The threat actor noted that the data dump is from January 2021 which includes the user information with Email addresses, IP addresses, names, passwords, usernames. The data dump was also circulated in a Telegram channel "Data Leak Monitor" on October 20, 2021 and in the deep web forums like Leakbase on December 19, 2021 by the threat actor "Chucky", in NoHide on August 16, 2021 by the threat actor "Fr33_D4t4" and in Raid Forums on April 14, 2021. From the package on BreachForums, ZeroFox extracted 1,579,414 usernames, email addresses, and hashed passwords. Other compromised data fields of note in this package include: ip_address, first_name, last_name, gender, phone_number, and address.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFox recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks