Mandiant Finds ShinyHunters-Style Vishing Attacks Stealing MFA to Breach SaaS Platforms

Certains articles de veille peuvent faire l'objet de traduction automatique.

Google-owned Mandiant on Friday said it identified an « expansion in threat activity » that uses tradecraft consistent with extortion-themed attacks orchestrated by a financially motivated hacking group known as ShinyHunters.
The attacks leverage advanced voice phishing (aka vishing) and bogus credential harvesting sites mimicking targeted companies to gain unauthorized access to victim

Source : https://thehackernews.com/2026/01/mandiant-finds-shinyhunters-using.html