UNC6671 (BlackFile) Vishing and SSO Compromise Campaign Ends Operations (cloud.google.com)

• UNC6671 (BlackFile) halts operations
• Targeted organizations in North America, Australia, UK
• Utilized vishing and SSO compromise

"The threat group UNC6671, known as BlackFile, has shut down its vishing and single sign-on (SSO) compromise campaign that targeted organizations across North America, Australia, and the UK. The group's cessation marks an end to a significant extortion and credential theft operation."