CERT24BlackFile extortion group rebrands as Redact and continues vishing-based extortionLoading data…
CERT24Threat Observatory
Period

BlackFile extortion group rebrands as Redact and continues vishing-based extortion

According to Google Threat Intelligence Group analysis, the BlackFile extortion group has rebranded to Redact. The group targets enterprise employees through voice phishing while posing as IT helpdesk staff, and steals credentials and MFA tokens.

← Back to intelligence

BlackFile extortion group rebrands as Redact and continues vishing-based extortion

According to Google Threat Intelligence Group analysis, the BlackFile extortion group has rebranded to Redact. The group targets enterprise employees through voice phishing while posing as IT helpdesk staff, and steals credentials and MFA tokens.