Helix: New Data Extortion Group Targeting SharePoint
Helix is a new data extortion group that emerged from the BlackFile and ShinyHunters ecosystem. It uses vishing, device code phishing, and…
Tag: vishing
Fake Microsoft Entra Passkey Enrollment Used in Voice Phishing Attacks Targeting M365 Users
A sophisticated threat actor tracked as O-UNC-066 by Okta is targeting organizations across multiple sectors with a voice-based phishing (vishing) scheme that…
O-UNC-066: Threat Actor Behind Fake Passkey Vishing Campaign
O-UNC-066 is a threat actor tracked by Okta that has been conducting voice-based phishing attacks targeting Microsoft 365 users. The actor uses…
SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users
A new banking fraud operation tracked as REF6045 by Elastic Security Labs is targeting customers of Mexican banks, fintech platforms, payment processors,…
ShinyHunters: Extortion Group Expanding Social Engineering Tactics
ShinyHunters is an extortion group that has expanded its operations using social engineering techniques similar to Scattered Spider, including vishing calls and…