SLH is diversifying its social engineering pool by specifically recruiting women to conduct vishing attacks, likely to increase the success rate of help desk impersonation. The group is said to be offering anywhere between $500 and $1,000 upfront per call, in addition to providing them with the necessary pre-written scripts to carry out the attack.
The ShinyHunters extortion gang claims it is behind a wave of ongoing voice phishing attacks targeting single sign-on (SSO) accounts at Okta, Microsoft, and Google, enabling threat actors to breach corporate SaaS platforms and steal company data for extortion. In these attacks, threat actors impersonate IT support and call employees, tricking them into entering their credentials and multi-factor authentication (MFA) codes on phishing sites that impersonate company login portals.
At a cabinet meeting on Tuesday, Lee said protecting the lives and safety of citizens is the government's greatest responsibility and called for all scam victims to be swiftly repatriated. The number of kidnappings of South Koreans in Cambodia has soared in recent months, prompting national security adviser Wi Sung-lac to form an emergency task force for the swift repatriation of citizens affected by scams.