O-UNC-066

☆ pin

Also known as Pink, CL-CRI-1147

Reports

First seen

Jul 8, 2026

Last seen

Aug 3, 2026

Motivation

Financial

Targeting

Sectors

Other ×2

Top ATT&CK techniques

T1078 Valid Accounts ×2T1566 Phishing ×2T1598.003 Phishing for Information: Spearphishing Link ×1T1556.003 Modify Authentication Process: Activate Phishing-Resistant Authentication ×1T1047 Windows Management Instrumentation ×1T1110.003 Brute Force: Password Spraying ×1T1041 Exfiltration Over C2 Channel ×1T1190 Exploit Public-Facing Application ×1T1598 Phishing for Information ×1T1005 Data from Local System ×1T1133 External Remote Services ×1T1490 Inhibit System Recovery ×1

Indicators

cve ×7domain ×1

Indicator values are available on Pro and via the API.

Associated CVEs

CVE-2024-42009 (exploited)CVE-2025-5777 (exploited)CVE-2026-15409 (exploited)CVE-2026-15410 (exploited)CVE-2026-25089 (exploited)CVE-2026-39808 (exploited)CVE-2026-48294

Recent reports

High

Cyber Brief July 2026 – EU Threat Intelligence Summary

CERT-EU Threat IntelAug 3, 2026 High

O-UNC-066 Uses Voice-Based Passkey Phishing to Compromise Microsoft 365 Accounts

The Hacker NewsJul 10, 2026 High

Entra passkey enrollment vishing targets Microsoft 365 users

Bleeping ComputerJul 8, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.