ShinyHunters Target 100+ Firms Using Phone Calls to Bypass SSO Security

### Executive summary Researchers warn of an ongoing, human-led identity theft campaign by ShinyHunters in coordination with Scattered Lapsu$ Hunters (SLSH) that targets enterprise Single Sign-On via vishing and a Live Phishing Panel to intercept credentials and MFA codes; attackers exfiltrate sensitive files for extortion, sometimes locking data and publishing leaks when ransoms are refused, affecting over 100 large organisations across multiple sectors.