UNC6671

UNC6671/BlackFile Group Targets Organizations with Vishing and Data Theft

UNC6671, also known as BlackFile, has intensified its vishing attacks since early 2026, targeting organizations in North America, the UK, and Australia. The group uses fake login pages and social engineering to steal credentials and exfiltrate data, demanding millions in ransom.