riskified-okta[.]comDomain
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 2 days ago
What the reports say
1 report, newest first · the exact sentence from each-
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More“A phishing campaign is using Okta and ServiceNow-themed domains (riskified-okta[.]com and shipmonk-servicenow.com) hosting spoofed SSO portals and MFA downgrade lures targeting YubiKey users to target e-commerce SaaS providers.”
Indicators reported together
named in the same reports- 119.13.79[.]145in 1 report
- 210.242.76[.]32in 1 report
- 211.20.144[.]116in 1 report
- blueskyweb[.]xyzin 1 report
- shipmonk-servicenow[.]comin 1 report
Copy these 5 indicators · defanged
Also named with it: CVE-2024-4577, CVE-2024-40766, CVE-2023-27532, CVE-2022-47945, CVE-2020-3259, CVE-2021-41773, CVE-2026-107186, CVE-2026-107187, CVE-2026-107188, CVE-2023-20269, CVE-2024-40711, CVE-2026-113380, CVE-2026-65162, CVE-2026-114509, CVE-2017-9841
Thanks — we review every report.