As cited
Copy frozen at (site build).
threat intel
UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data
UNC6671, a data extortion group, conducts voice phishing attacks against enterprise employees in financial services, private equity, and professional services sectors. The group impersonates IT help desk staff and contacts workers on their personal phones to social engineer access during fake urgent security migrations.
Why it matters: Practitioners in targeted sectors must train employees to verify unexpected security migration requests through established channels and implement controls to prevent credential compromise via personal devices.
- Source published
- First seen by Cybersecurity Tracker