ShinyHunters Claims Okta Customer Breaches

Cybercrime group ShinyHunters has claimed responsibility for a spree of voice phishing attacks that were made possible by so-called voice-phishing kits, sold on dark web platforms. A recent blog published by Okta Threat Intelligence states these kits are used on an as-a-service basis and have already targeted Google, Microsoft and Okta.

ShinyHunters allegedly stole data from Crunchbase, SoundCloud and Betterment, with the hackers saying they used voice phishing to obtain Okta’s sign-on codes for Crunchbase and Betterment. In December, Soundcloud said data from around 20 million of its users had been stolen

“Once you get into the driver’s seat of one of these tools, you can immediately see why we are observing higher volumes of voice-based social engineering,” said Moussa Diallo, threat researcher at Okta Threat Intelligence. According to Okta, the threats posed by voice-based phishing have grown significantly in recent months, with these novel approaches having success in stealing data.

“Using these kits, an attacker on the phone to a targeted user can control the authentication flow as that user interacts with credential phishing pages. They can control what pages the target sees in their browser in perfect synchronisation with the instructions they are providing on the call. The threat actor can use this synchronisation to defeat any form of MFA that is not phishing-resistant,” added Diallo.

Wide-scale hacks of this nature bring the impact of identity risk front and centre for enterprises, especially those with large, distributed workforces. It is believed that the voice-based phishing activities are ongoing, with cybersecurity researchers suggesting using multi-factor authentication that is more difficult to bypass when facing this threat type.

Join Cloud & Cyber Security Expo

4-5 March 2026, Excel London

From Threat to Trust – Secure Your Stack, Protect Your Business.

Join CISOs, Architects, and Risk Leaders tackling Zero Trust, post-quantum encryption, and AI threats at the UK’s most comprehensive security event.

Secure Your Ticket