ClosedHighNo fix needed
Retool breach: SMS phishing, deepfaked voice call and synced MFA codes
Retool (cloud)
An attacker phished a Retool employee by SMS, then called them with a deepfaked voice to get an MFA code. Because Google Authenticator synced codes to the employee's Google account, the attacker got their MFA codes too, and took over 27 cloud customer accounts, all in crypto.
Why this severity: Social engineering; account takeover of cloud customers
- Started
- Aug 27, 2023
- Closed
- Sep 13, 2023
Affected
Not published yet
Fixed in
No fixed release yet
Timeline2
Advisories1
Get an email when a new major security incident drops. No spam, unsubscribe any time.
