Threat actor
Fog Data Science
Last fetched
Fog Data Science is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.
Description
Fog Data Science, a data broker, sells location data about individuals to law enforcement agencies, obtained from thousands of apps on Android and iOS app stores. The company's web application, Fog Reveal, provides detailed histories of people's lives, selling access for less than $10,000 per year. In the U.S alone, Fog has past or ongoing contractual relationships with at least 18 local, state, and federal law enforcement clients. Fog's service allows for "pattern of life" analyses, revealing an individual's daily routines and habits. The service can execute broad searches, such as gathering device IDs for everyone in a specific area. The company also uses a "Project Intake Form" that requests detailed information about persons of interest, including their medical provider locations, and harvests location data from smartphones through apps and advertising systems. Critics, including former law enforcement officials, have expressed alarm over the tool’s ability to track individuals in private spaces, such as homes, without judicial oversight. The company was founded in 2016 by two former Department of Homeland Security officials, Robert Liscouski and Matthew Broderick, who served under President George W. Bush.
Techniques by tactic
No ATT&CK techniques are recorded for Fog Data Science in WhisperGraph.
Attributed infrastructure
None published. WhisperGraph carries no ATTRIBUTED_TO edge to Fog Data Science today — this states the absence of a published link, not that Fog Data Science has no infrastructure.
References
- https://www.eff.org/deeplinks/2022/08/inside-fog-data-science-secretive-company-selling-mass-surveillance-local-police
- https://www.eff.org/deeplinks/2022/06/what-fog-data-science-why-surveillance-company-so-dangerous
- https://www.eff.org/deeplinks/2022/09/members-congress-urge-ftc-investigate-fog-data-science
- https://www.eff.org/press/releases/data-broker-helps-police-see-everywhere-youve-been-click-mouse-eff-investigation
- https://www.404media.co/location-data-firm-offers-to-help-cops-track-targets-via-doctor-visits/
- https://www.pbs.org/newshour/politics/how-an-obscure-cellphone-tracking-tool-provides-police-mass-surveillance-on-a-budget
- https://arstechnica.com/tech-policy/2022/09/cops-wanted-to-keep-mass-surveillance-app-secret-privacy-advocates-refused/
© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.
Related pages
Pivot from Fog Data Science into its techniques, tactics and any attributed infrastructure.
Queries
Resolves the slug to this actor, merging every duplicate node sharing the same name.
MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
a.references AS references, a.campaigns AS campaigns
LIMIT 25Techniques this actor uses, grouped by the tactic each one serves.
MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000Infrastructure publicly attributed to this actor.
MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25Or query Whisper from your own LLM workflow via the Whisper MCP server.