SecurityThe Hacker Newsabout 3 hours ago
UNC6671 Vishing Attacks Target Personal Phones
1 min read
UNC6671 uses vishing calls to employees' personal phones, posing as IT help desk staff to steal SaaS credentials and MFA tokens. The group targets financial services, private equity, and professional services, exfiltrating data from Microsoft 365 and Okta. Over $10.6 million in Bitcoin payments tracked between January and May 2026.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
