UNC6671: Helpdesk Vishing, SSO and SaaS Cross-Traversal, and Multi-Brand Extorti

<h2> description: "Deep-dive reverse engineering analysis of a sophisticated HTML-based credential harvester spoofing a corporate domain with only 1/26 AV detection." </h2>

<h1> Compromised Email + Copilot: AI-assisted BEC Accelerating Internal Reconnaissance, Writing Style Imitation, AiTM, and Wire Fraud </h1> <h2> 1. Basic Information </h2> <ul>

<h2> 1. Basic Information </h2> <ul> <li> <strong>Article Name:</strong> BlockStrap: Magento and Adobe Commerce RCE (CVE-2026-103849)</li> <li> <strong>Published By:</strong>

A threat actor has been targeting organizations spanning multiple sectors with voice-based fake security requests that prompt Microsoft 365 users to enroll a new Entra passkey