ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited
ReliaQuest confirms ShinyHunters phishing attack targeting employee credentials.
Cybersecurity firm ReliaQuest has confirmed a phishing attack by the ShinyHunters group that compromised an employee's credentials. The attackers used a fake ReliaQuest SSO phishing page and impersonated a security employee to trick the victim into entering their password and approving a push notification. While the attackers gained brief view-only access to an identity dashboard, ReliaQuest states no customer data, business applications, or systems were compromised.
AI summary of the linked source. Not reviewed by an editor. How this works
Run ReliaQuest?
Get an email when a new story names ReliaQuest, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA ReliaQuest employee fell victim to a targeted phishing attack in which threat actors cloned the company's SSO login page and impersonated a trusted colleague to socially engineer MFA approval. This incident highlights that even cybersecurity professionals are not immune to sophisticated credential harvesting combined with MFA fatigue or push notification abuse. The attacker's ability to gain — even briefly — view-only access to an identity dashboard underscores how a single compromised account can expose sensitive organizational infrastructure. Prompt detection and containment limited the blast radius, but the incident demonstrates that phishing-resistant MFA and rigorous user training remain critical even inside security firms.
What helps against this
How we list vendors
- Phishing-resistant MFA
A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- domain — company.claims