Cybersecurity giant ReliaQuest has confirmed a failed social engineering attack where hackers gained temporary view-only access but were blocked from sensitive data.

  • Attackers impersonated ReliaQuest security staff using vishing techniques.
  • A fake SSO page hosted on a lookalike domain was used to harvest credentials.
  • Device-trust controls prevented unauthorized access to core applications.
  • No customer data or internal systems were compromised.

Leading cybersecurity firm ReliaQuest has officially confirmed that it successfully mitigated a sophisticated social engineering attack. The threat actors, believed to be linked to the notorious ShinyHunters extortion gang, attempted to breach the company's identity systems through deceptive tactics.

The Anatomy of the Breach

The attack involved a highly targeted 'vishing' (voice phishing) campaign. Hackers registered domains following a specific pattern, such as reliaquest.claims, to impersonate the company's IT help desk. By calling employees and posing as legitimate security personnel, the attackers tricked one staff member into accessing a fraudulent Single Sign-On (SSO) page protected by a content delivery network.

Read Also:Meta’s NameTag Face-Recognition Feature: Exists in Code but Not Yet Available

Why This Matters

BozokMedia analysis shows that even the most advanced security infrastructures can be bypassed if the human element is compromised. This incident highlights a critical shift in cybercrime, where attackers prioritize psychological manipulation over direct software exploitation to gain initial access.

The success of a credential theft often relies more on the urgency created by a phone call than the sophistication of the phishing link itself.

During the incident, a targeted employee inadvertently entered their credentials into the fake portal and approved an MFA push notification. This granted the attackers temporary, view-only access to the ReliaQuest identity dashboard. However, the breach was halted when device-trust controls successfully blocked all subsequent attempts to move laterally into actual business applications.

Historical Background

ShinyHunters has established a terrifying reputation in the cybersecurity landscape as a premier data extortion group. They specialize in breaching large-scale organizations and leveraging stolen data to demand massive ransoms. This recent attempt on ReliaQuest marks a direct confrontation between a major security provider and one of the industry's most persistent threat actors.

Did You Know?: Once attackers possess valid credentials, the effectiveness of traditional prevention tools can drop by over 60%, making identity protection vital.

Frequently Asked Questions

Was any customer data stolen?
No. ReliaQuest confirmed that no customer data was touched and no business applications were accessed.

How did the hackers gain access?
They used social engineering (vishing) to trick an employee into providing credentials on a fake SSO page.