ShinyHunters Targets Salesforce Amid Clues of Scattered Spider Collaboration
ID: 995d95fd-11b7-5efe-b3b6-e5dbeb8f3a05
STIX ID: report--995d95fd-11b7-5efe-b3b6-e5dbeb8f3a05
Feed Name: ReliaQuest Blog
Threat Score
ReliaQuest outlines a resurgence of ShinyHunters—potentially collaborating with Scattered Spider—conducting coordinated ticket-themed phishing and Salesforce credential-harvesting campaigns that leverage vishing, Okta-branded SSO phishing pages, and disposable domain registrations; analysis of domain registration patterns (hundreds of impersonating domains, common registrars, and masking services) points to ongoing targeting of finance and technology sectors and provides actionable mitigations for defenders.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.