Cybersecurity experts are raising concern over two emerging threat actors; Cordial Spider and Snarky Spider, linked to a rise in stealth attacks targeting cloud-based business platforms.
The groups rely on voice phishing (vishing), impersonating IT personnel or executives to trick employees into logging into fake Single Sign-On (SSO) pages. Once credentials are captured, attackers infiltrate systems such as Google Workspace, HubSpot, Microsoft SharePoint, and Salesforce.
By avoiding malware and using legitimate login details, they remain undetected while stealing sensitive data, altering records, and carrying out fraud.
Experts warn that these attacks highlight growing vulnerabilities in SaaS environments and stress the need for stronger authentication measures and employee awareness.
About The Author
