Apollo Global Management disclosed a breach after attackers used social engineering to access some of its cloud platforms over several days in July. The company says personal data may have been exposed, including names, contact details, and Social Security numbers. Reporting links the incident to an IT helpdesk-themed vishing campaign targeting financial and investment firms.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
An IT helpdesk call just helped breach Apollo and expose names, contact details, even Social Security numbers. The script is simple: “Hi, this is the IT helpdesk, I’m calling about your access to our cloud platform. Can you approve that login prompt I just sent?” That’s helpdesk-themed vishing tied to the Apollo breach. Here’s the trap: the call feels internal and urgent, but they need you to read out a one-time code or tap Approve so they can jump into our cloud platforms, exactly how Apollo’s data was accessed over several days. Your move: if you get an unexpected IT helpdesk call about your access, hang up, call back using the official IT number in our directory, and only then take action.
A real campaign of voice-phishing (vishing) calls targeted major hedge funds and private equity firms by impersonating internal IT/help desk staff. Victims were pressured into completing “routine” security steps and were sent to fake login pages that captured usernames, passwords, and MFA codes in…
A criminal group tracked as UNC6671 called employees while pretending to be their company IT helpdesk, creating urgency around “mandatory” security changes. Victims were directed to lookalike login pages to “enable passkeys” or “update MFA,” allowing attackers to steal passwords and capture…
A phone-first extortion campaign targeted dozens of major U.S. financial firms by calling employees and posing as corporate help-desk staff. Victims were pushed to “update” passkeys/MFA and sent to fake login pages; attackers captured passwords and MFA codes in real time to take over accounts and…
A ransom-focused hacking group targeted major U.S. financial and other firms by calling employees on their personal phones while impersonating the company help desk. Victims were pushed to “update passkeys or multifactor authentication” and sent to look‑alike websites designed to steal passwords…
Levi Strauss reported that an unauthorized party used social-engineering to compromise three employees’ company-issued computers and steal corporate data. Reporting tied the incident to a wider campaign where attackers impersonated IT help desks using spoofed phone numbers and fraudulent websites…
The roundup describes real social-engineering incidents: a phishing email that led an employee to enter credentials on a fake Microsoft 365 login page, and a wave of voice-phishing attempts against major hedge funds using voice-mimicking technology. Both incidents show practical lures that can be…
