Following their Salesforce attacks last year, the cybercrime group has broadened its targeting and gotten more aggressive with extortion tactics.
Mandiant analyzed ShinyHunters' MO, detailing how it steals login and MFA codes.
Mandiant says a wave of recent ShinyHunters SaaS data-theft attacks is being fueled by targeted voice phishing (vishing) attacks and company-branded phishing sites that steal single sign-on (SSO) ...
There are reports that threat actor ShinyHunters is behind an active voice phishing campaign, aimed at stealing single ...
'A lot more' victims to come, we're told ShinyHunters has claimed responsibility for an Okta voice-phishing campaign during ...
A surge in attacks that bypass some types of multifactor authentication has been tied to a new generation of voice-phishing ...
Atlassian, RingCentral, ZoomInfo also among tech targets ShinyHunters has targeted around 100 organizations in its latest ...