Data BreachBleeping Computer
8.0 — CRITICAL
New BlackFile extortion group linked to surge of vishing attacks
A new financially motivated hacking group tracked as BlackFile has been linked to a wave of data theft and extortion attacks against retail and hospitality organizations since February 2026. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
BlackFile, a financially motivated hacking group, has been linked to a surge of vishing attacks against retail and hospitality organizations since February 2026, impersonating corporate IT helpdesk staff to steal employee credentials and demand seven-figure ransoms.
⚙️Technical Details
Affected Systems
SalesforceSharePoint
Attack Vectors
vishing (voice-based phishing)spoofed VoIP numbers or fraudulent Caller ID Names
💥Impact Assessment
Severity: high
Who Is at Risk
Retail and hospitality organizations
🛡️Recommended Actions
1Strengthen call-handling policies and enforce multifactor identity verification for callers
2Conduct simulation-based social engineering training for frontline staff
3Regularly review and update employee credentials and internal directories
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.