Security News UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data TheHackerNews Daniel Bender 07 Aug 2026 Share UNC6671 uses vishing and AitM phishing to steal cloud credentials and MFA tokens, then exfiltrate data from Microsoft 365, Okta, and other SaaS apps.