Canva among ~100 targets of ShinyHunters Okta identity-theft campaign

Researchers and incident responders report an active ShinyHunters‑branded campaign using advanced voice‑phishing to steal Okta SSO credentials, enroll attacker devices into victims' MFA solutions, pivot into SaaS environments to exfiltrate data, and pursue extortion; Silent Push and Mandiant have tracked targeting of around 100 organizations and claimed leaks for Crunchbase and Betterment.