RH-ISAC Details CL-CRI-1116 Vishing and SaaS Extortion Campaign
RH-ISAC describes CL-CRI-1116 targeting retail and hospitality with vishing and SSO phishing to steal credentials, abuse SaaS access to locate and exfiltrate sensitive files, and extort victims; it recommends caller-verification policies, training and technical controls