zerofox logo
Advisories

Breach Disclosure: Qatar Ministry of Justice

|by Alpha Team

banner image

Standing Intelligence Requirements

For the most up to date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Details

On May 15, 2022, a recently registered threat actor "keftar" from the BreachForums posted a data breach package targeting Qatar Ministry of Justice (moj[.]gov[.]qa), a government legal affairs and legislative activities management in Qatar. From this package, ZeroFox extracted 1,329 email addresses. No passwords were found in this breach..

Recommendations

  • If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
  • If one of your entities receives an alert, ZeroFox recommends immediate password changes for the affected account
  • Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks

Tags: legal/consulting,  mid-east/africa,  government