Okta Vishing Campaign Allegedly Linked to ShinyHunters: What You Need to Know

Okta disclosed a voice-phishing (vishing) campaign using custom, real-time phishing kits that coordinate with callers to relay credentials and dynamically present MFA prompts, enabling attackers to bypass common MFA methods; the criminal group ShinyHunters claimed responsibility and published alleged data leaks (claims include tens of millions of records for Betterment, Crunchbase, and SoundCloud). Okta recommends phishing-resistant authentication (passkeys/FastPass), network restrictions, blocking anonymization services, and employee awareness to mitigate these attacks.