Standing Intelligence Requirements

For the most up to date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Details

On July 4, 2022, a reputed threat actor "kelvinsecurity" from the BreachForums posted a data breach package targeting Banco Bci (bci[.]cl), a Chile-based commercial banking services company which operates through retail, wholesale and corporate banking. The data dump was also circulated in the Telegram Channel "KelvinSecurity - Dark Market & Leaks" (hxxps://t[.]me/kelvinsecuritydarkmarket/3923) on July 4, 2022. From the package published in BreachForums, ZeroFox extracted 12,877 email addresses. No passwords were found in this breach.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFox recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks