UNC6783 Hackers Use Fake Okta Pages in Corporate Breach Campaign
The UNC6783 hackers are using fake Okta login pages and social engineering to breach corporate systems, targeting Business Process Outsourcers (BPOs) to gain access to larger companies. They trick employees by impersonating support staff, stealing credentials, and enrolling their own devices for persistent access, also employing fake software updates to install Remote Access Trojans (RATs).