The UNC6671 data extortion group is conducting a new wave of vishing attacks, primarily targeting financial services, private equity, and professional services. They impersonate IT help desk staff to trick employees into facilitating urgent security migrations, often contacting them via personal phones. The goal is to steal SaaS data and compromise enterprise accounts.