← Back to Feed
Welcome to BlackFile: Inside a Vishing Extortion Operation
May 15, 2026 · Google Cloud Security · Severity: CRITICAL
Written by: Austin Larsen, Tyler McLellan, Genevieve Stark, Dan Ebreo Introduction Google Threat Intelligence Group (GTIG) has continued to track an expansive extortion campaign by UNC6671, a threat actor operating under the "BlackFile" brand, that targets organizations via sophisticated voice...
Key Takeaways
- Written by: Austin Larsen, Tyler McLellan, Genevieve Stark, Dan Ebreo Introduction Google Threat Intelligence Group.
- UNC6671’s attack lifecycle and provides defenders with actionable guidance to detect and mitigate.