Hackers target FCC, crypto firms in advanced Okta phishing attacks

Researchers discovered an active phishing kit named CryptoChameleon being used to target FCC employees and users of cryptocurrency platforms (Binance, Coinbase, Kraken, Gemini) with near-perfect Okta SSO and other impersonation pages. The attackers combine email, SMS, and voice social engineering, CAPTCHA filtering, and a real-time control panel to capture credentials, MFA tokens, and even photo IDs; Lookout observed active sites, backend logs showing more than 100 successful phishes, and a list of IoCs provided in the report.