ShinyHunters claim to be behind SSO-account data theft attacks
ID: 3fc916f8-ee0f-5731-afaf-b0c56ffebaab
STIX ID: report--3fc916f8-ee0f-5731-afaf-b0c56ffebaab
Feed Name: DataBreaches.Net
ShinyHunters is reportedly behind an ongoing wave of voice-phishing attacks targeting SSO accounts at Okta, Microsoft Entra, and Google, where callers impersonate IT support to trick employees into entering credentials and MFA codes on phishing portals. Successful compromises grant broad access to connected enterprise SaaS applications, enabling data theft for extortion. Read more at [Bleeping Computer](https://www.bleepingcomputer.com/news/security/shinyhunters-claim-to-be-behind-sso-account-data-theft-attacks/).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
