ZeroFox Weekly Intelligence Brief

ZeroFox Weekly Intelligence Brief – November 18, 2024

TLP:GREEN

ZeroFox’s Weekly Intelligence Briefing highlights the major developments and trends across the cyber threat landscape. ZeroFox Intelligence is derived from a variety of sources, including—but not limited to—curated open-source accesses, vetted social media, proprietary data sources, and direct access to threat actors and groups through covert communication channels. Information relied upon to complete any report cannot always be independently verified. As such, ZeroFox applies rigorous analytic standards and tradecraft in accordance with best practices and includes caveat language and source citations to clearly identify the veracity of our Intelligence reporting and substantiate our assessments and recommendations. All sources used in this particular Intelligence product were identified prior to 12:00 PM (EST) on November 15, 2024; per cyber hygiene best practices, caution is advised when clicking on any third-party links.

Read the Brief

View the full report here

Encrypted Networks Lure Minors into Organized Crime, Europol Warns

What happened: Europol has issued a report revealing that criminal networks across Europe are intensifying the recruitment of minors for serious organized crime. Recruitment tactics include targeting young individuals on social media platforms and encrypted messaging apps. Disguising criminal activities as “challenges” or games, these networks lure minors and engage in encrypted messaging and further gamified tasks. The assignments range from extortion to violent crimes. This method also shields interactions, leaving almost no traceable digital evidence for the authorities to track.

German Interior Minister Warns of Cyber Threat Ahead of Election

What happened: Germany’s interior minister, Nancy Faeser, warned that the country must enhance its cyber defenses against disinformation and cyberattacks, reportedly from Russia, as it prepares for early elections set to take place in February 2025. The Federal Office for Information Security’s report stated no major incidents occurred during the recent European Union (EU) and state elections, but monitoring will intensify for national elections. Russian disinformation campaigns highly likely aim to destabilize and manipulate citizens. Germany is especially likely to be vulnerable to such falsified and heightened claims since Social Democrat Olaf Scholz's three-way coalition’s recent collapse.

Telegram’s Recent Policy Shift Leads Threat Actors to Platform Exodus and Backup Channels

What happened: ZeroFox has observed significant shifts in the behavior of threat actor groups following recent changes to Telegram's policies. The platform now allows users to report illegal activities for automated takedown or manual moderation, and its updated privacy policy permits the disclosure of users' phone numbers and IP addresses if a valid court order is issued. In response to these changes, threat actors—including groups like Anonymous Collective, Dark Storm Team, and Mysterious Team Bangladesh—have begun deleting their Telegram channels. They are also removing links to these channels and reorganizing their operations to create new backup channels to ensure continued communication and evade detection.