Vishing—voice-based phishing attacks—is escalating across sectors as criminals use phone calls to manipulate employees into revealing sensitive data or access credentials. Organizations from financial firms to tribes to retailers are reporting successful attacks, prompting urgent security retraining and communication protocols.
·UNC3753 threat group combines vishing calls with physical office intrusions to extort data from legal and financial firms
·BlackFile Group targets retail and hospitality workers via voice phishing to breach company systems
·DevSecOps teams must redesign communication security to defend against voice-based social engineering
·Employee training programs now focus on recognizing vishing tactics without requiring actual phone call simulations
·Spokane Tribe and AssetMark among recent victims reporting significant financial losses to voice phishing schemes
drawn from DevOps.com, sosafe-awareness.com, The Hacker News, Security Affairs · updated 2d ago