Skip to main content
← All Articles

Tag

#UNC6671

2 articles

Advertisement

TH
CRITICAL
Threat Intel

BlackFile: Analyzing UNC6671 Vishing & Cloud Data Extortion

Examines UNC6671's BlackFile vishing, AiTM, and cloud data exfiltration tactics against Microsoft 365 & Okta. Actionable mitigations included.

Runtime Rebel Intel
6 min read·May 15, 2026
Cordial Spider and Snarky Spider: Rapid SaaS Extortion via Vishing
HIGH
Threat Intel

Cordial Spider and Snarky Spider: Rapid SaaS Extortion via Vishing

Researchers identify Cordial Spider and Snarky Spider using vishing and SSO abuse to execute high-speed data theft within corporate SaaS environments.

Runtime Rebel Intel
3 min read·May 1, 2026