Targeted Smishing Attacks by Threat Group “The Com” On The Rise

The report describes an active criminal group dubbed “The Com” that targets primarily telecom and tech organizations using SMS phishing, Okta login impersonation (pulling resources from Okta to appear legitimate), SIM swapping, and social-engineered calls to bypass MFA and harvest credentials for data exfiltration; it also includes mitigation advice like security awareness training.