Breach404
Back to Insights
Cybersecurity2 min readAugust 7, 2026

UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

A threat group called UNC6671 is using phone calls to employees' personal mobile devices to trick them into revealing credentials and access tokens for cloud-based software services. You should educate employees that attackers may impersonate IT support o

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site - headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now - It's Free