vishing news
2 stories
vishinghigh
UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data
A cybercrime group, identified as UNC6671, has reportedly launched a series of vishing attacks aimed at employees' personal phones to compromise Software-as-a-Service (SaaS) data. The attacks involve the impersonation of IT support personnel, with the ultimate goal of tricking individuals into divulging credentials and multi-factor authentication (MFA) tokens through fraudulent login portals.
helixhigh
New Helix Group Targets SharePoint Data via Vishing and MFA Abuse
A new data extortion group, dubbed Helix, has emerged, employing voice phishing (vishing) and multi-factor authentication (MFA) abuse to compromise SharePoint environments and exfiltrate data. The group's primary objective is to extort victim organizations by threatening to publish stolen information or sell it to other cybercriminals.