Latest goon squad to use fake helpdesk calls to steal creds

Reported 04 Jun 2026 by otx · Severity: medium

A new extortion group called Pink, tracked as cluster CL-CRI-1147, employs voice phishing and fake IT helpdesk impersonation to compromise organizations. The gang steals employee credentials, bypasses multi-factor authentication, and exfiltrates data from cloud storage platforms