Sneaky hackers reverse defense mitigations when detected

The threat actors used social engineering tactics such as calling employees and impersonating IT staff to harvest credentials or using Telegram and SMS messages to redirect targets to custom-crafted phishing sites that feature the company's logo.