TLDR Tech / InfoSec
New Pink Hacking Group Attacking Enterprise Users to Steal Cloud Storage Passwords
A new extortion group, Pink (CL-CRI-1147), is targeting enterprise users by employing vishing and social engineering tactics to steal cloud storage credentials. Upon gaining access, the group rapidly exfiltrates files from Microsoft OneDrive and SharePoint using Microsoft automation, then threatens victims with internal Microsoft Teams/Email messages demanding payment within 72 hours.
Read the full story