Standing Intelligence Requirements

For the most up to date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Details

On May 14, 2022, a threat actor ("ecstasy") from the underground forum BreachForums posted a data breach package targeting Authena AG, a product authenticity and traceability service (with an IoT and blockchain platform) operating from Switzerland. From this package, ZeroFox extracted 5,732 usernames and/or email addresses. Of this, 777 records contained hashed passwords.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFox recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks