Retool breach: SMS phishing, deepfaked voice call and synced MFA codes

Teaser from the source

An attacker phished a Retool employee by SMS, then called them with a deepfaked voice to get an MFA code. Because Google Authenticator synced codes to the employee's Google account, the attacker got their MFA codes too, and took over 27 cloud customer accounts, all in crypto.

This is the RSS-feed teaser. Read the full article at the original source.