Tag: MFA bypass
Extortion crew UNC6671 leans on personal mobiles in SaaS raids
Google ties a vishing wave against finance and legal firms to UNC6671, which calls staff on personal phones.
Okta warns of vishing attacks targeting Microsoft 365 user credentials
Okta warns of a rise in voice phishing attacks where callers impersonate IT support to steal Microsoft 365 credentials and…
Cybercriminals Weaponize Vishing and SSO Hijacking for Rapid SaaS Extortion
Vishing calls are successfully coercing help desk staff into resetting MFA, enabling attackers to steal SSO tokens, encrypt data, and…