Google Threat Intelligence Group (GTIG) is tracking UNC6671, a cybercrime group using voice phishing attacks to steal corporate data and extort victims. Although the BlackFile extortion brand reportedly shut down in May 2026, the group’s operations appear to have continued under several new names, including Redact, Pink, Helix, and Falcon. The group targets enterprise workers […]
The post UNC6671 Vishing Gang Hijacks Microsoft 365 and Okta Accounts to Extort Financial Firms appeared first on Cyber Security News.