ShinyHunters uses healthcare help desks to break into cloud accounts
The group is using phone calls to persuade help desks to reset multifactor authentication, then taking over cloud accounts and stealing data from connected services—often without deploying traditional ransomware.