ZeroFox Intelligence Flash Report - Dark Web Actors Promoting Maritime Data

Product Serial: F-2024-01-17d

TLP:CLEAR

In this flash report, ZeroFox researchers report on observations that threat actors are selling data related to maritime vessels and their infrastructure, which comes on the heels of commercial vessels being targeted in the Red Sea during the Israel-Hamas War.

Standing Intelligence Requirements

Deep Dark Web and Criminal Underground DDW

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report [here] (https://zf-dashboard-media.s3.amazonaws.com/intel/63c2f433-ed55-4873-bf33-30a8dfca91bf)

Key Findings

ZeroFox has identified at least two instances in which threat actors are selling data that provides real-time information on maritime vessels, including the geographic positions of vessels, vessel details, journey details, and data on maritime infrastructure.
The leaked data has little monetary value for the buyer or seller and may demonstrate that politically-motivated actors will forgo profit to achieve their ideological aims, and there will likely be continued convergence between geopolitical issues and cybersecurity threats.
Houthi attacks targeting commercial vessels transiting the Red Sea have resulted in significant political gains for the group and have caused major disruptions to global supply chains.
There are other important shipping lanes across the globe, and threat actors may view obtaining similar datasets as helpful to achieving their political aims or harming their political adversaries.