2022 Phishing — Okta, Signal, Authy affected
Data compromised
Phone numbers, Internal documents
Technical writeup
SMS phishing impersonating IT. Stolen creds accessed internal systems. 93 Authy accounts, Signal phone numbers (1,900), Okta customer data. Second breach in June by same 0ktapus group.
Root cause
Social engineering; SMS phishing.