ZeroFox Weekly Intelligence Brief – January 6, 2025

ZeroFox Weekly Intelligence Brief – January 6, 2025

TLP:GREEN

ZeroFox’s Weekly Intelligence Briefing highlights the major developments and trends across the threat landscape, including digital, cyber, and physical threats. ZeroFox Intelligence is derived from a variety of sources, including—but not limited to—curated open-source accesses, vetted social media, proprietary data sources, and direct access to threat actors and groups through covert communication channels. Information relied upon to complete any report cannot always be independently verified. As such, ZeroFox applies rigorous analytic standards and tradecraft in accordance with best practices and includes caveat language and source citations to clearly identify the veracity of our Intelligence reporting and substantiate our assessments and recommendations. All sources used in this particular Intelligence product were identified prior to 12:00 PM (EST) on January 3, 2025; per cyber hygiene best practices, caution is advised when clicking on any third-party links.

Read the Brief

View the full report here

U.S. Imposes Sanctions on Entities in Iran and Russia over Election Interference

What happened: The United States imposed sanctions on entities from Iran and Russia accused of attempting to interfere in the 2024 U.S. election. According to the U.S. Treasury Department, the entities linked to Iran's Revolutionary Guard Corps (IRGC) and Russia's military intelligence agency (GRU) were engaged in activities aimed at stoking political divisions and influencing the voters through disinformation campaigns.

Suspect Accused of Hacking Trump's AT&T Call Records Arrested

What happened: An individual in Texas has been arrested for allegedly transferring confidential phone records unlawfully. Authorities suspect the individual is the cybercriminal known as “Kiberphant0m”, who is accused of breaching at least 15 telecommunications firms. The attackers reportedly targeted a select group of users from major U.S. telecom companies, such as AT&T and Verizon. Although the networks have since been secured, the hackers previously gained full access to record calls and steal call data. This prompted CISA to recommend encrypted communication for high-profile individuals to mitigate future risks.

Final Rule Issued to Address Threats Posed by Foreign Adversary Access to Americans’ Data

What happened: The U.S. Department of Justice (DOJ) has issued a comprehensive final rule carrying out Executive Order (E.O.) 14117 “Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern.” The E.O. charged the DOJ with establishing and implementing a new regulatory program to address the urgent and extraordinary national security threat posed by the continuing efforts of countries of concern—and covered persons that they can leverage—to access and exploit Americans’ bulk sensitive personal data and U.S. government-related data.