Skip to content
ThreatCluster

Social Engineering Attack Targets ReliaQuest Employees

First seen 24 Aug 2026, 20:24 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •August 25, 2026 at 20:20 UTC
  • •Hackers impersonated ReliaQuest security staff to steal credentials.
  • •The attack involved a spoofed domain and a fraudulent MFA request.
  • •ReliaQuest's security controls prevented access to sensitive data.

On August 22, 2026, ReliaQuest reported a social engineering attack where hackers impersonated security staff to obtain credentials. The attackers used a spoofed domain to trick an employee into approving a malicious multi-factor authentication (MFA) request. This incident temporarily exposed a single identity session with view-only access to ReliaQuest's systems. However, the company's layered security controls prevented unauthorized access to internal applications and sensitive data. The attack highlights the risks associated with social engineering tactics in corporate environments. ReliaQuest is currently investigating the incident and has implemented additional security measures to mitigate future risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 47d ago How this analysis works

Timeline

2026-08-22
Social engineering attack detected
Threat actors impersonated security personnel to steal credentials via a spoofed domain.
Gbhackers
2026-08-22
Employee credentials compromised
An employee was tricked into approving a malicious MFA request, exposing a single identity session.
Cybersecuritynews

More articles in this cluster (2)

Following this threat?

Track ReliaQuest in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 3