Cybercrime groups, notably one known as ShinyHunters, are executing a new wave of vishing attacks aimed at single sign-on (SSO) services. These attacks allow hackers to gain unauthorized access to victim networks and extract sensitive data in real time. The method involves using social engineering tactics to trick individuals into revealing their login credentials. This poses a significant risk to organizations that rely on SSO for streamlined access to multiple applications, as a breach can lead to widespread data theft. Companies and users need to be vigilant about sharing sensitive information and verify requests for credentials, especially through phone calls or messaging platforms.