ZeroFox Intelligence Flash Report - Mobile Numbers Advertised for Sale in Dark Web Forum

ZeroFox Intelligence Flash Report - Mobile Numbers Advertised for Sale in Dark Web Forum

Product Serial: F-2025-06-13b

TLP:CLEAR

In this Flash report, ZeroFox researchers report on the recent advertisement of mobile numbers in the dark web forum Xss.

Standing Intelligence Requirements

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

• On June 7, 2025, the actor “Machine1337” posted on the predominantly Russian-speaking dark web forum xss, advertising the sale of mobile numbers from at least 20 companies.
• Machine1337 claimed that the mobile numbers are “freshly scraped and verified” and offered access to a free sample of the data in the post. It is unclear whether these numbers are associated with personal or corporate mobile phones.
• While access to phone numbers would not directly facilitate a cyberattack, it could enable an attacker to conduct various types of social engineering activity that can result in subsequent exploitation.
• The phone numbers could also be leveraged in the facilitation of various types of fraud activity—particularly if a buyer is able to enrich the data by correlating other types of personally identifiable information (PII) to the phone numbers.