Full Report
Plus: Travelers to the US may have to hand over five years of social media history, South Korean CEOs are resigning due to cyberattacks, and more.
Analysis Summary
# Main Topic
Proposed expansion of surveillance measures for non-US travelers entering the United States, specifically requiring submission of up to five years of social media history under the Electronic System for Travel Authorization (ESTA) program.
## Key Points
- US Customs and Border Protection (CBP) released a proposal on the Federal Register instituting the collection of up to five years of social media history from certain travelers.
- This requirement potentially affects individuals traveling under the ESTA visa waiver program, which includes citizens from allied nations like the UK, Australia, and New Zealand.
- The proposal arises amid a backdrop of plummeting international travel to the US and a record number of phone searches conducted by CBP at the border.
- The increased data collection is tied to existing trends of data grabbing by the Department of Homeland Security (DHS) concerning immigration policies.
## Threat Actors
No specific malicious threat actor group is directly associated with implementing this policy change, as this is a policy proposal by a US Government agency (CBP/DHS).
## TTPs
- **Information Collection & Surveillance:** Expansion of digital data collection requirements for entry clearance.
- **Policy/Regulatory Change:** Utilizing the Federal Register process to expand surveillance scope.
- *Note: The context mentions TTPs related to the Salt Typhoon group and doxxers, but these are separate incidents and not related to the social media data collection proposal.*
## Affected Systems
- **Traveler Data:** Social media accounts/data history (up to five years).
- **Programs:** Electronic System for Travel Authorization (ESTA) visa waiver program participants.
## Mitigations
- **Policy Advocacy/Review:** Individuals subject to the ESTA program should monitor the Federal Register process regarding this surveillance proposal.
- **Data Minimization:** Travelers may need to assess the privacy implications of their public/semi-public social media history prior to applying for ESTA.
- *Note: No technical indicators of compromise (IoCs) are relevant to this policy discussion.*
## Conclusion
The proposed mandate for travelers under the ESTA program to submit five years of social media history represents a significant expansion of digital vetting by US border authorities. Organizations and individuals utilizing this travel route should prepare for potential increased scrutiny and data disclosure requirements.