> Mandiant details how ShinyHunters abuse SSO to steal cloud data
[AUTHOR: Lawrence Abrams]
[DATE: 31/01/2026 15:02]
[LANGUAGE: EN]
Mandiant says a wave of recent ShinyHunters SaaS data-theft attacks is being fueled by targeted voice phishing (vishing) attacks and company-branded phishing sites that steal single sign-on (SSO) credentials and multi-factor authentication (MFA) codes. [...]