vishing

Product showcase: Trust Onion uses rotating codewords to verify callers

AI, Android, iOS, macOS, News, scams, vishing, voice recognition /

Product showcase: Trust Onion uses rotating codewords to verify callers 2026-11-02 at 07:30 By Anamarija Pogorelec Trust Onion is a free app that gives trusted groups three rotating codewords to check who they are communicating with. It also includes signed selfies, message checks, and callback requests. It is available for macOS, iOS, and Android. I […]

Product showcase: Trust Onion uses rotating codewords to verify callers Read More »

Fake IT help desk callers got by on little more than names and email addresses

attack, Cisco, Claude Code, cybercrime, cybersecurity, Don't miss, Malware, Microsoft Teams, News, Ransomware, report, scams, social engineering, threats, vishing, voice recognition /

Fake IT help desk callers got by on little more than names and email addresses 2026-10-30 at 08:30 By Mirko Zorz Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access sessions, Cisco Talos Incident Response (Talos […]

Fake IT help desk callers got by on little more than names and email addresses Read More »

Vishing Extortion Group UNC6671 Rebrands After Making Millions

cybercrime, Malware & Threats, UNC6671, vishing /

Vishing Extortion Group UNC6671 Rebrands After Making Millions 2026-08-07 at 14:06 By Ionut Arghire Initially calling itself BlackFile, the group has expanded operations to the Redact, Pink, Helix, and Falcon brands. The post Vishing Extortion Group UNC6671 Rebrands After Making Millions appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Vishing Extortion Group UNC6671 Rebrands After Making Millions Read More »

The script, not the voice, is what makes AI voice phishing work

cybercrime, Don't miss, identity verification, News, phishing, research, scams, threats, vishing /

The script, not the voice, is what makes AI voice phishing work 2026-07-17 at 10:31 By Sinisa Markovic The call comes in at 4:40 on a Friday. The voice belongs to a senior manager, or sounds close enough, and she needs a password reset before a flight. She is polite, she is in a hurry, […]

The script, not the voice, is what makes AI voice phishing work Read More »

Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers

Microsft 365, Okta, phishing, vishing /

Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers 2026-07-10 at 14:06 By Ionut Arghire The attackers call victims to direct them to phishing websites mirroring Microsoft Entra ID login pages. The post Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers Read More »

Scams now operate like real businesses with budgets and targets

Bitdefender, cybersecurity, Email, News, report, scams, social engineering, social media, vishing /

Scams now operate like real businesses with budgets and targets 2026-06-10 at 07:23 By Anamarija Pogorelec Social media has overtaken email as a primary attack vector, showing changes in how people consume information and interact online, according to Bitdefender’s Global Scam Intelligence Report 2026. Fraud campaigns use advertisements, sponsored content, impersonation pages, and direct messages […]

Scams now operate like real businesses with budgets and targets Read More »

Romanian Man Extradited to US for Role in Hacking Scheme 17 Years Ago

charged, cybercrime, hacker, vishing /

Romanian Man Extradited to US for Role in Hacking Scheme 17 Years Ago 2026-05-06 at 16:42 By Eduard Kovacs Gavril Sandu, 53, was indicted in 2017, but was arrested and extradited to the United States only in 2026. The post Romanian Man Extradited to US for Role in Hacking Scheme 17 Years Ago appeared first […]

Romanian Man Extradited to US for Role in Hacking Scheme 17 Years Ago Read More »

AI platform ATHR makes voice phishing a one-person job

Abnormal AI, AI, Don't miss, Hot stuff, News, phishing, vishing /

AI platform ATHR makes voice phishing a one-person job 2026-04-20 at 14:37 By Zeljka Zorz For $4,000 and a cut of the take, a lone criminal can now run a fully automated voice-phishing operation via ATHR, a plaform that spoofs emails alerts from Google, Microsoft, and Coinbase, buries a phone number in each message, and […]

AI platform ATHR makes voice phishing a one-person job Read More »

Researchers uncover AI-powered vishing platform

AI, Artificial Intelligence, Don't miss, Hot stuff, Mirage Security, News, scams, threats, vishing /

Researchers uncover AI-powered vishing platform 2026-03-11 at 20:28 By Zeljka Zorz A vishing-as-a-service platform that helps scammers carry out so-called “press 1” scams is misusing text-to-speech (TTS) capabilities provided by AI voice technology company ElevenLabs, Mirage Security researchers claim. How “press 1” vishing scams work For “press 1” scams, fraudsters spoof phone numbers of trusted […]

Researchers uncover AI-powered vishing platform Read More »

Scattered Lapsus$ Hunters seeks women for vishing attacks

cybercriminals, Dataminr, Don't miss, Hot stuff, News, social engineering, tips, vishing /

Scattered Lapsus$ Hunters seeks women for vishing attacks 2026-02-26 at 14:55 By Zeljka Zorz The Scattered Lapsus$ Hunters (SLH) hacking collective has launched a recruitment push aimed specifically at women, offering cash payments for participating in voice-phishing (vishing) attacks. A few days ago, threat intelligence firm Dataminr detected posts on a public Telegram channel advertising […]

Scattered Lapsus$ Hunters seeks women for vishing attacks Read More »

ShinyHunters flip the script on MFA in new data theft attacks

data theft, Don't miss, extortion, Google Cloud, Hot stuff, Mandiant, News, Silent Push, social engineering, SSO, tips, vishing /

ShinyHunters flip the script on MFA in new data theft attacks 2026-02-02 at 18:50 By Zeljka Zorz Multi-factor authentication (MFA) is supposed to defend against phishing attacks, but threat actors operating under the ShinyHunters banner are using it as a pretext in ongoing social engineering attacks aimed at bypassing it. Among those successfully targeted in […]

ShinyHunters flip the script on MFA in new data theft attacks Read More »

ShinyHunters-Branded Extortion Activity Expands, Escalates

cybercrime, ShinyHunters, SSO, vishing /

ShinyHunters-Branded Extortion Activity Expands, Escalates 2026-02-02 at 17:54 By Ionut Arghire Hackers rely on evolved vishing and login harvesting to compromise SSO credentials for unauthorized MFA enrollment. The post ShinyHunters-Branded Extortion Activity Expands, Escalates appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

ShinyHunters-Branded Extortion Activity Expands, Escalates Read More »

Over 100 Organizations Targeted in ShinyHunters Phishing Campaign

cybercrime, data breach, phishing, ShinyHunters, vishing /

Over 100 Organizations Targeted in ShinyHunters Phishing Campaign 2026-01-27 at 17:17 By Eduard Kovacs Domains set up by the threat actor suggest attacks aimed at Atlassian, Canva, Epic Games, HubSpot, Moderna, ZoomInfo, and WeWork. The post Over 100 Organizations Targeted in ShinyHunters Phishing Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Over 100 Organizations Targeted in ShinyHunters Phishing Campaign Read More »

Okta users under attack: Modern phishing kits are turbocharging vishing attacks

attack tools, Don't miss, Google, Hot stuff, Microsoft 365, News, Okta, vishing /

Okta users under attack: Modern phishing kits are turbocharging vishing attacks 2026-01-23 at 15:31 By Zeljka Zorz Threat actors who specialize in vishing (i.e., voice phishing) have started using phishing kits that can intercept targets’ login credentials while also allowing attackers to control the authentication flow in a targeted user’s browser in real-time. At least […]

Okta users under attack: Modern phishing kits are turbocharging vishing attacks Read More »

The year ahead in cyber: What’s next for cybersecurity in 2026

agentic AI, cyber risk, cybersecurity, Don't miss, News, predictions, quantum computing, scams, Symantec, Video, vishing /

The year ahead in cyber: What’s next for cybersecurity in 2026 2025-11-17 at 07:31 By Help Net Security In this Help Net Security video, Dick O’Brien, Principal Intelligence Analyst at Symantec, outlines the major cyber risks expected in 2026. He explains that attackers are often breaching networks by targeting people instead of exploiting software flaws. […]

The year ahead in cyber: What’s next for cybersecurity in 2026 Read More »

Attackers fake IT support calls to steal Salesforce data

data theft, Don't miss, enterprise, extortion, Google, Hot stuff, News, Salesforce, social engineering, vishing /

Attackers fake IT support calls to steal Salesforce data 2025-06-04 at 17:47 By Zeljka Zorz Over the past several months, a threat group has been actively breaching organizations’ Salesforce instances and exfiltrating customer and business data, Google Threat Intelligence Group (GTIG) has warned. The attackers in question – currently tracked as UNC6040 – are masters […]

Attackers fake IT support calls to steal Salesforce data Read More »

Google Warns of Vishing, Extortion Campaign Targeting Salesforce Customers

cybercrime, data extortion, UNC6040, vishing /

Google Warns of Vishing, Extortion Campaign Targeting Salesforce Customers 2025-06-04 at 17:01 By Ionut Arghire A financially motivated threat actor employing vishing to compromise Salesforce customers, and extort them. The post Google Warns of Vishing, Extortion Campaign Targeting Salesforce Customers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Warns of Vishing, Extortion Campaign Targeting Salesforce Customers Read More »

Inside PlugValley: How this AI vishing-as-a-service group operates

cybercrime, cybercriminals, Don't miss, Fortra, News, Video, vishing /

Inside PlugValley: How this AI vishing-as-a-service group operates 2025-04-17 at 07:41 By Help Net Security In this Help Net Security video, Alexis Ober, Threat Intel Analyst at Fortra, discusses the threat actor group PlugValley, which is now offering AI-powered vishing-as-a-service. Rather than requiring technical skills or large budgets, PlugValley’s service lets any cybercriminal launch vishing […]

Inside PlugValley: How this AI vishing-as-a-service group operates Read More »

Black Basta target orgs with new social engineering campaign

CISA, Don't miss, Hot stuff, News, Ransomware, Rapid7, remote management, social engineering, vishing /

Black Basta target orgs with new social engineering campaign 2024-05-13 at 15:46 By Zeljka Zorz Black Basta, one of the most prolific ransomware-as-a-service operators, is trying out a combination of email DDoS and vishing to get employees to download remote access tools. Black Basta TTPs and newest initial access attempts According to a cybersecurity advisory […]

Black Basta target orgs with new social engineering campaign Read More »

Scroll to Top