--- title: 'Several dozen' orgs targeted by a new extortion crew description: Google Threat Intelligence Group has identified a new financially motivated extortion group, UNC6783, that has targeted several dozen high-value corporations.... canonical: https://daily.dev/posts/several-dozen-orgs-targeted-by-a-new-extortion-crew-hwkvov6ma twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: 'Several dozen' orgs targeted by a new extortion crew | daily.dev og:description: Google Threat Intelligence Group has identified a new financially motivated extortion group, UNC6783, that has targeted several dozen high-value corporations.... og:url: https://daily.dev/posts/several-dozen-orgs-targeted-by-a-new-extortion-crew-hwkvov6ma og:image: https://api.daily.dev/og/posts/hwkVOV6mA.png og:image:alt: 'Several dozen' orgs targeted by a new extortion crew og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # 'Several dozen' orgs targeted by a new extortion crew **[The Register](https://daily.dev/sources/theregister)** · 3 min read · 0 upvotes · 0 comments ## Summary Google Threat Intelligence Group has identified a new financially motivated extortion group, UNC6783, that has targeted several dozen high-value corporations. The group uses phishing and helpdesk social engineering to compromise call centers and BPOs, then leverages stolen credentials to access their clients' environments. Tactics include spoofed Okta login pages via live chat, MFA bypass through clipboard theft, fake security software updates delivering remote access malware, and Proton Mail ransom notes. The group may be linked to the 'Mr. Raccoon' persona allegedly behind a breach of Adobe, where 13 million support tickets and 15,000 employee records were reportedly stolen via an Indian BPO. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Google: New UNC6783 hackers steal corporate Zendesk support tickets](https://daily.dev/posts/google-new-unc6783-hackers-steal-corporate-zendesk-support-tickets-gepqft9l2) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#phishing](https://daily.dev/tags/phishing), [#data-breach](https://daily.dev/tags/data-breach) [View this post on daily.dev](https://daily.dev/posts/several-dozen-orgs-targeted-by-a-new-extortion-crew-hwkvov6ma) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"'Several dozen' orgs targeted by a new extortion crew","url":"https://daily.dev/posts/several-dozen-orgs-targeted-by-a-new-extortion-crew-hwkvov6ma","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/several-dozen-orgs-targeted-by-a-new-extortion-crew-hwkvov6ma"},"datePublished":"2026-04-09T17:13:53.523Z","dateModified":"2026-04-09T17:14:17.459Z","description":"Google Threat Intelligence Group has identified a new financially motivated extortion group, UNC6783, that has targeted several dozen high-value corporations....","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f8e477302c5c3a7496649e72b3a49bd3?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f8e477302c5c3a7496649e72b3a49bd3?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/several-dozen-orgs-targeted-by-a-new-extortion-crew-hwkvov6ma","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,phishing,data-breach","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"'Several dozen' orgs targeted by a new extortion crew"}]} ```