CyberheistNews Vol 16 #26: A New Extortion Scam Uses IT Impersonation to Breach Organizations
KnowBe4, Tuesday, June 30th, 2026
A new extortion group named Pink impersonates IT staff via voice phishing to steal credentials and breach organizations.
KnowBe4's CyberheistNews details a newly identified extortion group called Pink that conducts voice phishing attacks by impersonating internal IT staff.
The attackers trick employees into entering credentials on fake sites, then compromise accounts and bypass MFA.
Once inside, they rapidly exfiltrate data from SharePoint and OneDrive before issuing extortion demands. Notably, the demands are delivered through the victim's own compromised communication channels, increasing pressure and credibility.