Tag: voice phishing

2 Attack Reports | 0 Vulnerabilities

Attack reports

Cybercrime Observations from the Frontlines: UNC6040 Proactive Hardening Recommendations

This analysis focuses on UNC6040, a financially motivated threat group specializing in voice phishing campaigns targeting Salesforce instances. The group employs social engineering tactics to trick employees into granting access or sharing credentials, facilitating large-scale data theft and extort…
social engineering
voice phishing
data exfiltration
multi-factor authentication
detection
salesforce
2025-10-01
access control
logging
identity verification
data loader
connected apps
Published: October 1, 2025
Linked vulnerabilities : CVE-2025-53690
Downloadable IOCs: 2

SecretCalls: A Formidable App of Notorious Korean Financial Fraudster

Voice phishing groups in South Korea build phishing pages and apps like SecretCalls to trick victims into installing malware and accessing phishing sites for financial fraud. Detailed analysis of SecretCalls Loader reveals anti-analysis techniques like DEX encryption, emulator detection, and instal…
android
2024-05-03
south korea
financial fraud
secretcalls
voice phishing
Published: May 3, 2024
Downloadable IOCs: 23
Click here to see more Attack Reports