UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data
UNC6671, a data extortion group, is targeting financial and professional services employees via voice phishing, posing as IT help desk staff to steal SaaS data, often contacting them on personal phones.
UNC6671, a data extortion group, is conducting vishing attacks targeting financial services, private equity, and professional services. Attackers pose as IT help desk staff, claiming mandatory, urgent security migrations. They target employees' personal phones to steal SaaS credentials and data. The group relies on voice phishing to trick victims into providing access.