⤷ Title: Inside UNC6671’s “BlackFile” Cloud Extortion Campaigns
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:56:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #adversary_in_the_middle #AiTM Proxy #BlackFile #Cloud Security #Google Threat Intelligence #infosec #MFA Bypass #Microsoft 365 Security #Okta Compromise #UNC6671 #Vishing Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 08:56:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #adversary_in_the_middle #AiTM Proxy #BlackFile #Cloud Security #Google Threat Intelligence #infosec #MFA Bypass #Microsoft 365 Security #Okta Compromise #UNC6671 #Vishing Campaign
Daily CyberSecurity
Inside UNC6671’s “BlackFile” Cloud Extortion Campaigns
A sophisticated identity-centric threat actor operating under the brand “BlackFile” has spent the early months of 2026 disrupting corporate cloud environments across the globe. A detai…
⤷ Title: Helix Data Extortion Group Emerges from BlackFile, ReliaQuest Reports
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 16 Jul 2026 07:03:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BlackFile #data extortion #Device Code Phishing #Helix #ReliaQuest #Sharepoint #ShinyHunters #Vishing
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 16 Jul 2026 07:03:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BlackFile #data extortion #Device Code Phishing #Helix #ReliaQuest #Sharepoint #ShinyHunters #Vishing
Daily CyberSecurity
Helix Data Extortion Group Emerges from BlackFile, ReliaQuest Reports
At a glance Actor / group Helix (suspected ties to BlackFile and ShinyHunters) Activity type Data extortion through identity-based intrusion Targets / victims Enterprises; high-visibility staff an…
⤷ Title: UNC6671 Vishing Extortion Rebrands Across 5 Brands
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 06:15:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AitM Phishing #BlackFile #Cloud Security #Extortion #UNC6671 #Vishing
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 12 Aug 2026 06:15:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AitM Phishing #BlackFile #Cloud Security #Extortion #UNC6671 #Vishing
Daily CyberSecurity
UNC6671 Vishing Extortion Rebrands Across 5 Brands
At a glance Actor or group UNC6671 (suspected single coordinated group) Activity type Vishing-led data theft and extortion Targets Financial services, private equity, law firms, enterprise cloud t…