Hackers Impersonate Security Staff to Steal Credentials in ReliaQuest Social Engineering Attack

Gbhackers •Divya • August 24, 2026

ReliaQuest has reported a targeted social engineering attack in which threat actors impersonated company security personnel, used a spoofed domain, and successfully persuaded one employee to approve a malicious multi-factor authentication (MFA) request. The incident, detected on August 22, 2026, resulted in the temporary exposure of a single identity session with view-only access to ReliaQuest’s […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Social Engineering Attack Targets ReliaQuest Employees On August 22, 2026, ReliaQuest reported a social engineering attack where hackers impersonated security staff to obtain credentials. The attackers used a spoofed domain to trick an employee into approving a malicious multi-factor authentication (MFA) request. This incident temporarily exposed a single identity session with view-only access to ReliaQuest's systems. However, the company's layered security controls prevented unauthorized access to internal applications and sensitive data. The attack highlights the risks associated with social engineering tactics in corporate environments. ReliaQuest is currently investigating the incident and has implemented additional security measures to mitigate future risks. 2 sources 51

Extracted Entities

Hackers Impersonate Security Staff to Steal Credentials in ReliaQuest Social Engineering Attack

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)