logo

ShinyHunters claim to be behind SSO-account data theft attacks

ID: 3fc916f8-ee0f-5731-afaf-b0c56ffebaab

STIX ID: report--3fc916f8-ee0f-5731-afaf-b0c56ffebaab

Feed Name: DataBreaches.Net

Threat Score
72/100

Date Published: 2026-01-24

Date Updated: 2026-04-19

Author: Dissent

...
...

ShinyHunters is reportedly behind an ongoing wave of voice-phishing attacks targeting SSO accounts at Okta, Microsoft Entra, and Google, where callers impersonate IT support to trick employees into entering credentials and MFA codes on phishing portals. Successful compromises grant broad access to connected enterprise SaaS applications, enabling data theft for extortion. Read more at [Bleeping Computer](https://www.bleepingcomputer.com/news/security/shinyhunters-claim-to-be-behind-sso-account-data-theft-attacks/).

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.