---
title: "Discussion on \"A Phone Call Is All It Takes: How \"Pink\" Is Draining Microsoft 365 Accounts and Extorting SMBs\" | Hashnode"
description: "Discussion on \"A Phone Call Is All It Takes: How \"Pink\" Is Draining Microsoft 365 Accounts and Extorting SMBs\". A criminal group bypasses MFA and empties OneDrive using a single phone call. Here's how the attack works and what stops it."
url: "https://hashnode.com/posts/source-hackread-https-hackread-com-pink-extortion-microsoft-365-cloud-data-vishing-scams/6a27f8eeee6fe2712d855b74"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [A Phone Call Is All It Takes: How "Pink" Is Draining Microsoft 365 Accounts and Extorting SMBs](https://relayshield.hashnode.dev/source-hackread-https-hackread-com-pink-extortion-microsoft-365-cloud-data-vishing-scams?utm_source=hashnode&utm_medium=feed)

A criminal group bypasses MFA and empties OneDrive using a single phone call. Here's how the attack works and what stops it.

Jun 9 · 4 min read · relayshield.hashnode.dev  
Read the article

-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#microsoft365](https://hashnode.com/tag/microsoft365)
-   [#vishing](https://hashnode.com/tag/vishing)
-   [#smb](https://hashnode.com/tag/smb)
-   [#phishing](https://hashnode.com/tag/phishing)
-   [#cloud-security](https://hashnode.com/tag/cloud-security)

## Written by

[RelayShieldAdmin](https://hashnode.com/@relayshieldsecurity)

@relayshieldsecurity · Boston, USA

  
[View profile](https://hashnode.com/@relayshieldsecurity)

Crypto security signals for developers — wallet risk, token honeypots, SIM swap detection, and more in one REST API.

Security intelligence at the carrier and identity layer — SIM swap detection, breach monitoring, wallet risk, and threat intelligence via REST API and MCP.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.