A familiar tactic popularized by chaotic crime crew Lapsus$ A new extortion brand called Pink uses voice phishing and fake help desk calls to gain initial access to organizations IT environments, steal their sensitive data, and threaten to leak it unless the victims pay a ransom demand. Palo Alto Networks Unit 42 first spotted the gang, which it tracks as cluster CL CRI 1147, and its data leak site, which went live on May 31. “Pink uses vishing and IT impersonation to phish credentials MFA,...
