ShinyHunters group opens new dark web leak site, claims responsibility for OKTA vishing campaign

Over on LinkedIn, AlonGal of Hudson Rock wrote:

BIG – ShinyHunters confirmed to me that they are behind the recent Okta vishing campaign and have published alleged data from three major victims (Crunchbase, SoundCloud, and Betterment) on their new blog, stating more are coming. 🔽

I was approached by ShinyHunters following a BleepingComputer report yesterday about an Okta SSO vishing campaign that resulted in several unknown victims. ShinyHunters confirmed they were behind the campaign and shared a Tor victims blog in which Crunchbase, SoundCloud, and Betterment all had their alleged data leaked after rejecting the group’s extortion attempt. The group said more victims will be published soon.

Read more at LinkedIn.

Related: Okta SSO accounts targeted in vishing-based data theft attacks (Bleeping Computer), ShinyHunters Leak Alleged Data of Millions From SoundCloud, Crunchbase and Betterment (HackRead)

Screengrab from dark web leak site with data dumps allegedly from Betterment, Crunchbase, and SoundCloud. — *Image: DataBreaches.net*

Kept in the Dark -- Meet the Hired Guns Who Make Sure School Cyberattacks Stay Hidden
Are Scattered Spider and ShinyHunters one group or two? And who did France arrest? (1)
"I'm Not Pro-Russia and I'm Not a Terrorist!" —- InfraGard and Airbus Hacker “USDoD” Unveils His New Campaigns
Okta's response to Lapsus$'s claimed hack has people asking, "Why didn't you tell us in January?"
Under Pressure: Exploring the effect of legal and criminal threats on security researchers and journalists