Cybercrime Groups Using Vishing and SSO Abuse in Rapid SaaS Extortion Attacks

Cybersecurity researchers are warning of two cybercrime groups conducting rapid, high-impact attacks within SaaS environments while leaving minimal traces. Cordial Spider, also known as BlackFile, CL-CRI-1116, O-UNC-045, and UNC6671, and Snarky Spider, also known as O-UNC-025 and UNC6661, have been linked to high-speed data theft operations.