Cyber crime group ShinyHunters has received global attention after Google urged 2.5 billion users to tighten their security following a data breach via Salesforce , a customer management platform.
Unlike data breaches where hackers directly break into databases holding valuable information, ShinyHunters – and several other groups – have recently targeted major companies through voice-based social engineering (also known as “vishing”, short for voice phishing).
Social engineering is when a person is tricked or manipulated into providing information or performing actions that they wouldn’t normally do.
In this case, to get access to protected systems, a criminal would pose as a member of the target company’s IT helpdesk and convince an employee to share passwords and/or multi-fact