Tag: vishing
One approved push notification let vishers into ReliaQuest
One approved MFA push gave ShinyHunters-linked callers a brief view-only session inside ReliaQuest.
Vishing entry behind 1.6M-account RingCentral data leak
ShinyHunters dumped account data after RingCentral refused an extortion demand.
Extortion crew UNC6671 leans on personal mobiles in SaaS raids
Google ties a vishing wave against finance and legal firms to UNC6671, which calls staff on personal phones.
Okta warns of vishing attacks targeting Microsoft 365 user credentials
Okta warns of a rise in voice phishing attacks where callers impersonate IT support to steal Microsoft 365 credentials and…
Hackers hijack Microsoft passkey enrollment in voice phishing blitz
The Muddled Libra threat actor uses voice phishing and fake Microsoft Entra passkey enrollment portals to gain persistent access to…
Helix Extortion Group Targets SharePoint with Vishing and Device Code Tactics
The Helix group uses vishing and device code phishing to break into SharePoint, then exfiltrates data for extortion or sale.