New 'Pink' cyber extortion group uses fake helpdesk calls and vishing to steal credentials
By
Jessica Lyons
Summary
A new cyber extortion group called Pink, possibly a rebrand of BlackFile, is using vishing (voice phishing) and fake IT helpdesk calls to trick employees into revealing credentials and multi-factor authentication (MFA) codes. Once they gain initial access to organizations' IT environments, they steal sensitive data and threaten to leak it unless a ransom is paid. The gang was first spotted by Palo Alto Networks' Unit 42, which tracks it as cluster CL-CRI-1147. Their data-leak site went live on May 31. This tactic of using fake helpdesk calls was previously popularized by the Lapsus$ crime group.
Source
bskyNew 'Pink' cyber extortion group uses fake helpdesk calls and vishing to steal credentialstheregister.comKey quotes
· 3 pulledPink uses vishing and IT impersonation to phish credentials/MFA, then exfiltrates enterprise cloud
Pink – which may be a rebrand of BlackFile – uses voice phishing and fake help-desk calls to gain initial access to organizations' IT environments
Palo Alto Networks' Unit 42 first spotted the gang, which it tracks as cluster CL-CRI-1147, and its data-leak site, which went live on May 31
You might also wanna read
Fake IT support calls on Microsoft Teams push EtherRAT malware
Fake IT support calls on Microsoft Teams push EtherRAT malware
Fake Microsoft Teams IT Support Calls Are Fueling a Dangerous New Wave of Enterprise Cyberattacks With EtherRAT
New Ransomware Technique Emerges: Fake Ransomware Support
Hackers Pose as Police to Trick Tech Companies Into Sharing Private Data
Hackers are successfully obtaining sensitive personal data from major tech companies by posing as law enforcement officers. Using spoofed em
wired.com·6mo ago
Google Confirms Data Breach in Salesforce CRM Theft Campaign by ShinyHunters
Google has become the latest victim of a data breach in a series of Salesforce CRM data theft attacks orchestrated by the ShinyHunters extor
bleepingcomputer.com·11mo ago
China-Based Phishing Groups Shift to Fake E-commerce Sites and Tax Refund Scams
China-based phishing groups are shifting tactics from traditional SMS scams about packages and toll fees to new offerings targeting holiday
Comments
Sign in to join the conversation.
No comments yet. Be the first.