Cybersecurity articles tagged #Vishing on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/spring-ring-voice-phishing-targets-microsoft-teams-usershttps://runtimerebel.com/blog/spring-ring-voice-phishing-targets-microsoft-teams-usersSpring Ring is an ongoing vishing campaign leveraging external Microsoft Teams accounts to impersonate IT support for payload delivery and NTLM relay attacks.Tue, 01 Sep 2026 02:47:23 GMTMicrosoft TeamsVishingSocial EngineeringNTLM RelaySpring Ringhttps://runtimerebel.com/blog/reliaquest-thwarts-shinyhunters-social-engineering-attack-on-okta-ssohttps://runtimerebel.com/blog/reliaquest-thwarts-shinyhunters-social-engineering-attack-on-okta-ssoReliaQuest confirms a social engineering attack by ShinyHunters targeting an employee's Okta SSO, blocked from accessing applications or customer data.Mon, 24 Aug 2026 16:25:26 GMTShinyHuntersSocial EngineeringPhishingVishingOktahttps://runtimerebel.com/blog/unc6671-targets-financial-sector-via-vishing-and-aitm-phishinghttps://runtimerebel.com/blog/unc6671-targets-financial-sector-via-vishing-and-aitm-phishingUNC6671, linked to BlackFile, exploits vishing and AiTM phishing against financial firms for cloud data theft and extortion.Sun, 09 Aug 2026 16:23:40 GMTVishingFinancial SectorData TheftUNC6671BlackFilehttps://runtimerebel.com/blog/microsoft-365-entra-passkey-vishing-targets-account-takeover-riskhttps://runtimerebel.com/blog/microsoft-365-entra-passkey-vishing-targets-account-takeover-riskA sophisticated vishing campaign targets Microsoft 365 users, tricking them into enrolling malicious Entra passkeys for account takeover. Learn detection and prevention.Wed, 08 Jul 2026 17:39:23 GMTMicrosoft 365EntraPasskeyVishingSocial EngineeringAccount Takeoverhttps://runtimerebel.com/blog/silent-ransom-group-targets-us-law-firms-via-vishing-and-intrusionshttps://runtimerebel.com/blog/silent-ransom-group-targets-us-law-firms-via-vishing-and-intrusionsSilent Ransom Group (Luna Moth) targets US law firms using vishing and physical intrusions for data extortion. Technical analysis and mitigation strategies.Tue, 09 Jun 2026 05:28:46 GMTSilent Ransom GroupLuna MothVishingLaw FirmsExtortionSocial Engineeringhttps://runtimerebel.com/blog/unc3753-vishing-and-physical-intrusions-fuel-u-s-data-extortionhttps://runtimerebel.com/blog/unc3753-vishing-and-physical-intrusions-fuel-u-s-data-extortionMandiant identifies UNC3753 targeting U.S. legal and financial sectors through sophisticated vishing and physical breaches to execute data theft extortion.Mon, 08 Jun 2026 09:43:30 GMTUNC3753VishingPhysical SecurityMandiantData ExtortionFinancial Sectorhttps://runtimerebel.com/blog/unc3753-targets-us-law-firms-with-vishing-physical-intrusionshttps://runtimerebel.com/blog/unc3753-targets-us-law-firms-with-vishing-physical-intrusionsUNC3753 (Luna Moth) leverages vishing and physical office intrusions to steal sensitive data from US law firms and professional services, leading to swift extortion.Fri, 05 Jun 2026 16:59:08 GMTUNC3753Luna MothSilent Ransom GroupVishingSocial EngineeringData TheftExtortionLaw FirmsPhysical IntrusionRMMWinSCPRclonehttps://runtimerebel.com/blog/google-android-scam-detection-real-time-ai-defense-against-fraudhttps://runtimerebel.com/blog/google-android-scam-detection-real-time-ai-defense-against-fraudGoogle introduces AI-powered Scam Detection for Android, utilizing on-device Gemini Nano to identify fraud patterns and protect users from voice-based phishing.Wed, 03 Jun 2026 09:44:39 GMTAndroidGoogle Gemini NanoAI DeepfakesVishingMobile Securityhttps://runtimerebel.com/blog/blackfile-analyzing-unc6671-vishing-cloud-data-extortionhttps://runtimerebel.com/blog/blackfile-analyzing-unc6671-vishing-cloud-data-extortionExamines UNC6671's BlackFile vishing, AiTM, and cloud data exfiltration tactics against Microsoft 365 & Okta. Actionable mitigations included.Fri, 15 May 2026 20:32:33 GMTUNC6671BlackFileVishingAitMMicrosoft 365OktaSharePointOneDriveData ExfiltrationExtortionSocial Engineeringhttps://runtimerebel.com/blog/cordial-spider-and-snarky-spider-rapid-saas-extortion-via-vishinghttps://runtimerebel.com/blog/cordial-spider-and-snarky-spider-rapid-saas-extortion-via-vishingResearchers identify Cordial Spider and Snarky Spider using vishing and SSO abuse to execute high-speed data theft within corporate SaaS environments.Fri, 01 May 2026 16:25:42 GMTCORDIAL SPIDERSNARKY SPIDERVishingSSO AbuseUNC6671UNC6661SaaS Securityhttps://runtimerebel.com/blog/fake-it-support-campaigns-deploy-customized-havoc-c2-payloadshttps://runtimerebel.com/blog/fake-it-support-campaigns-deploy-customized-havoc-c2-payloadsHuntress identifies a new campaign using fake IT support lures and vishing to deploy Havoc C2 for data exfiltration and ransomware delivery.Tue, 03 Mar 2026 20:11:54 GMTHavoc C2Social EngineeringVishingHuntressRansomwarehttps://runtimerebel.com/blog/slh-recruits-women-for-1000-it-help-desk-vishing-attackshttps://runtimerebel.com/blog/slh-recruits-women-for-1000-it-help-desk-vishing-attacksScattered LAPSUS$ Hunters (SLH) are offering financial incentives to recruit women for vishing campaigns targeting corporate IT help desks and IAM systems.Wed, 25 Feb 2026 16:30:53 GMTScattered LAPSUS HuntersVishingSocial EngineeringIT Help DeskIAM