Aug 27, 2023
1 new incident, 0 with updates.
Started
- ClosedHighNo fix needed
Retool breach: SMS phishing, deepfaked voice call and synced MFA codes
An attacker phished a Retool employee by SMS, then called them with a deepfaked voice to get an MFA code. Because Google Authenticator synced codes to the employee's Google account, the attacker got their MFA codes too, and took over 27 cloud customer accounts, all in crypto.
Retool (cloud)Closed Sep 13, 2023