Smooth criminals talking their way into cloud environments, Google says

Mandiant's M-Trends 2025 report shows attackers increasingly use interactive social engineering (voice phishing and ClickFix) for initial access, exploit edge devices (often via zero-days) to 'live on the edge' with long dwell times, and deploy backdoors like Brickstorm (attributed to UNC6201) to harvest credentials and hand off access rapidly to ransomware and extortion groups.