🎯 Potential ShinyHunters campaign targeting 77 Okta customers.
A KQL-based correlation of https://t.co/HKguMSxZIM subdomains and newly registered https://t.co/X4ADrlMHEz domains over the last 30 days revealed 77 matching domains, where the xxx identifier was identical across both domain formats. This suggests potential targeting of those Okta customers.
#threathunting 🧙♂️