Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
Source Threatpost
Description
The 0ktapus threat group conducted a large-scale phishing campaign targeting over 130 companies, primarily aiming to steal Okta identity credentials and multi-factor authentication (MFA) codes. The attackers sent text messages with links to phishing sites mimicking the Okta authentication pages of targeted organizations. This campaign compromised nearly 10,000 accounts across more than 130 organizations, including 114 US-based firms and victims in 68 other countries. Initial attacks targeted telecommunications companies to gather phone numbers used in MFA attacks. The ultimate goal was to access internal systems and facilitate supply-chain attacks. The campaign demonstrated how attackers can bypass MFA protections through phishing. Researchers recommend using FIDO2-compliant security keys and educating users about MFA attack methods to mitigate such threats.