
- SLH targets ~100 enterprises with vishing attacks on Okta SSO credentials
- Live Phishing Panel intercepts credentials and MFA tokens in real-time
- No confirmed breaches yet, but hijacked Okta sessions pose severe risks
The notorious Scattered LAPSUS$ Hunters (SLH) threat actors are currently engaged in a massive identity theft campaign targeting Okta single sign-on (SSO) credentials at around 100 large enterprises.