UNC6671 - f4n6

notes

IT help-desk vishing tricks executives into handing over Microsoft 365 access

1. Executive summary Arctic Wolf is tracking a widespread data theft and extortion cluster — tracked as PREY-0058 — that compromises Microsoft 365 and other SaaS accounts

08 Sep 2026 · 8 min read read →

notes

Attackers pick Levi's pockets in social engineering attack

1. Executive summary Levi Strauss is investigating a data breach after attackers used social engineering to access three employees' work computers and exfiltrate "certain

10 Aug 2026 · 4 min read read →

notes

UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

1. Executive summary A financially motivated data-theft and extortion campaign attributed to the threat cluster UNC6671 is actively targeting financial services, private equity, and professional

07 Aug 2026 · 8 min read read →