Precursor Intelligence
Threat News
Latest cyber threat intelligence, breaches and exploitation
2 matching stories
VishingMuddyWater Disguises Chaos Ransomware as Decoy in Microsoft Teams Vishing Attacks
MuddyWater used Chaos ransomware as a decoy in a Microsoft Teams vishing campaign to harvest credentials, establish persistence, and exfiltrate data before attempting extortion, per Rapid7's May 2026 analysis.
UNC6671 Rebrands as Redact, Pink, Helix, and Falcon After Millions in Vishing Extortion
UNC6671, a data extortion group that rebranded from BlackFile in May 2026, has expanded into four new leak site brands — Redact, Pink, Helix, and Falcon — after raking in millions in extortion via vishing campaigns targeting enterprise employees.
