Retool Falls Victim to SMS-Based Phishing Attack Affecting 27 Cloud Clients

Software development company Retool has disclosed that the accounts of 27 of its cloud customers were compromised following a targeted and SMS-based social engineering attack.
The San Francisco-based firm blamed a Google Account cloud synchronization feature recently introduced in April 2023 for making the breach worse, calling it a "dark pattern."
"The fact that Google Authenticator syncs to

account accounts april attack breach calling clients cloud compromised customers development engineering feature francisco google google account making phishing phishing attack retool san san francisco sms social social engineering software software development software development company synchronization victim