UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

A wave of cyber attacks targeting financial services, private equity, and professional services is attributed to data extortion group UNC6671. The group uses voice phishing (vishing) to target enterprise employees, posing as IT help desk staff facilitating mandatory, urgent security migrations. The threat actor often contacts employees via their personal phones, aiming to steal SaaS data.