Social Engineering Attack Targets ReliaQuest Employees

On August 22, 2026, ReliaQuest reported a social engineering attack where hackers impersonated security staff to obtain credentials. The attackers used a spoofed domain to trick an employee into approving a malicious multi-factor authentication (MFA) request. This incident temporarily exposed a single identity session with view-only access to ReliaQuest's systems. However, the company's layered security controls prevented unauthorized access to internal applications and sensitive data. The attack highlights the risks associated with social engineering tactics in corporate environments. ReliaQuest is currently investigating the incident and has implemented additional security measures to mitigate future risks.

Key Points: • Hackers impersonated ReliaQuest security staff to steal credentials. • The attack involved a spoofed domain and a fraudulent MFA request. • ReliaQuest's security controls prevented access to sensitive data.