Google Warns of New Campaign Targeting BPOs to Steal Corporate Data

Google's Threat Intelligence Group is warning about a financially motivated hacker known as UNC6783, potentially linked to the persona "Mr. Raccoon," who's targeting business process outsourcing firms to steal data from high-value companies. The attackers use sophisticated social engineering tactics including fake Okta login pages and spoofed security software updates, often targeting helpdesk staff to gain trusted access before conducting data theft extortion operations. The group is believed to be behind the recent Adobe data breach, where hackers allegedly stole information on 15,000 employees and millions of support tickets from a third-party supplier in India.