Since February 2026, the BlackFile Group has targeted retail and hospitality sectors, employing vishing attacks to steal employee credentials. Palo Alto Networks' Unit 42 reported that the group uses spoofed VoIP…
The Google Threat Intelligence Group (GTIG) reported that the extortion group UNC6671, previously known as BlackFile, has rebranded to Redact and expanded its operations. Despite claiming to have retired in May 2026,…