'Impersonation as a service' the next big thing in cybercrime

ReliaQuest and industry sources report a surge in English-language social engineering as a commoditized service — termed "impersonation-as-a-service" — enabling criminals (including suspected collaboration between Scattered Spider and ShinyHunters) to conduct targeted voice-phishing and account-takeover campaigns against Salesforce and other systems, impacting numerous high-profile organizations; AI and the reuse of nation-state techniques are increasing the accessibility and sophistication of these attacks.