Canva, Atlassian, Epic Games Among the 100+ Enterprises Targeted by ShinyHunters Group

A coordinated, human-led identity-theft campaign attributed to an alliance labeled SLSH is actively targeting over 100 high-value organizations across industries by combining vishing with a “live phishing panel” that presents fake login pages in real time to intercept SSO credentials and MFA codes; compromised single-sign-on sessions act as "skeleton keys" for lateral movement, data theft, extortion, and in some cases encryption of systems. Silentpush observed malicious infrastructure and targeting patterns, and the report urges immediate employee warnings and auditing of SSO activity.